Tradeworks: the server of one financial institution using its hosted internet trading service was accessed without authorization

1. 2021-04-25

   In the evening, a server of one company using the hosted service was accessed from outside without authorization. The company detected errors tied to the access and cut the server off from the network. [1]

2. 2021-06-10

   After an investigation with several security firms, it reported that no trace of data being transferred or leaked was found and that personal data in the database was unlikely to have been taken. Only one customer was accessed, and the ASP service builds a separate environment for each customer. [2]

The company said it could not answer, for security reasons, which institution was hit and what the attack involved, and it did not comment on the extent of the damage. It explained that it builds a separate system environment for each customer, that customers cannot affect one another and that only one company was hit. [1]

The company reported the damage individually to the institutions using the service. It did not report to the authorities directly, but it submitted the list of institutions using the service to the Kanto and Kinki Local Finance Bureaus through the institution that was hit. [1]