Daiwa Institute of Research: unauthorized access to Naito Securities' online trading system
Between 04:46 and 06:56 on 14 October, the web server of Financial Plate/WB4, the online trading system Daiwa Institute of Research runs for Naito Securities, was accessed without authorization. A temporary database holding logged-in users' session data was accessed, and names, addresses, phone numbers, emails, securities account numbers, employers and withdrawal bank accounts of up to 631 users logged in at the time may have leaked. The database holding assets and trades showed no traces, and no unauthorized withdrawals or trades were found.
Disclosed
2026-10-15
Organizations involved
2
Leaked or at risk
631
631
Downtime
Unknown
Timeline
- Started, Detected 2026-10-14
- Disclosed 2026-10-15
- 1 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Web app
Data exposed or at risk
Supply chain
- Organizations listed on this site
- 2
Services hit
Organizations involved
[Breached][Critical]Tokyo, KotoInformation and communications
Daiwa Institute of Research Ltd.[Through a supplier][Critical]Osaka, Osaka, KitaFinance and insurance631 leaked
Naito Securities Co., Ltd.
Sources
- [1][Official]当社運用システムへの不正アクセスによる個人情報漏えいの可能性についてDaiwa Institute of Research · 2026-10-15