PhillipCapital Japan: digital securities contractor intrusion
A digital securities contractor of PhillipCapital Japan was breached and customer names, trade quantities, email addresses and other data leaked.
Disclosed
2026-10-31
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
A digital securities contractor noticed anomalies in its system, began investigating, identified unauthorized outside access the same day and informed the company. [1]
PhillipCapital Japan disclosed that the contractor's log review had confirmed the leak. [1]
Impact
For 162 people: name, trade quantity, holdings after the trade, country and trade time. For 100: investor ID, name, email address, date of birth, status and registration date. For 1: name, email address, address and country. Whether the groups overlap is not stated. The contractor's system holds no bank account data, and services other than digital securities are not affected. The contractor has not been named. [1]
Response
No fraudulent trades and no publication or spread of the data online have been found. Affected people will be contacted individually once details are known. [1]
Timeline
- Detected 2026-10-29
- Disclosed 2026-10-31
- 2 days
Attack or cause
- Method
- [Intrusion]
- Impact
- [Data leak]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 1
Organizations involved
[Through a supplier][Major]Tokyo, MinatoFinance and insurance
PhillipCapital Japan Ltd.Digital securities customers, in groups of 162, 100 and 1 people; any overlap is not stated.
Sources
- [1][Official]デジタル証券に関する外部委託先1社への不正アクセスによるお客様情報の漏洩についてPhillipCapital Japan · 2026-10-31 18:50