[Resolved][Severity: Critical][Intrusion]

Nissan Securities: unauthorized access hit three web servers of its online trading system, and it suspended three services, including futures and options trading, for the time being

Three web servers of its online trading system failed, possibly from ransomware. The company suspended three services for the time being.

Disclosed

2021-04-26

Organizations involved

Leaked or at risk

Unknown

Downtime

Unknown

What happened

2021-04-25 23:00
From around this time, three web servers failed, and the online trading of index futures and options, Click 365 and Click Kabu 365 became unavailable. The system company reported the problem. [1] [3]
2021-04-26
Nissan Securities announced the failure. It cut off the network of the online trading system and reported to the Kanto Local Finance Bureau. It was investigating, including the possibility that ransomware was the cause. [1] [3]
2021-04-27
The company decided to suspend the three services for the time being. The investigation of the cause and of any leak was expected to take one to two weeks, and there was no outlook for recovery or reopening. [2]
2021-05-07
The company said the investigation was taking longer than the one to two weeks first expected, and that checking for a customer data leak was its top priority. It would decide carefully when to resume the services. [4]
2021-06-10
The company said an outside firm's investigation found no trace of data being collected, transferred or leaked. The servers held personal data that could be taken out, but no trace of that was found, and personal data in the database was unlikely to have been taken. It acknowledged that part of the data was encrypted, without personal data. [5]
2021-10-14
It decided to end the online trading service on the current system on December 20. [6] [7]

Impact

Three online trading services became unavailable. For index futures and options, the company took settlement orders only by phone, and it also took deposits and withdrawals by phone. Alternative ways to place orders for Click 365 and Click Kabu 365 were under consideration. [2]

Face-to-face trading at branches, corporate division trades, cash and margin stock trading and the online trading of commodity futures worked as usual. When the company announced the case, no leak of personal or important information had been confirmed. [1] [2] [3]

The Click 365 and Click Kabu 365 services have already been moved to replacement systems. For index futures and options trading there is no plan to introduce a replacement system, and existing customers can continue only to place settlement orders by phone. [6]