> JapanHacked_
[Investigating][Severity: Critical][Intrusion]

SMBC Nikko Securities: intrusion into its employee stock ownership plan system; data on up to 56,487 members leaked

Its employee stock ownership plan system was breached. Names, addresses, holdings and bank account details of up to 56,487 members leaked; the system is suspended.

Disclosed

2026-11-11

Organizations involved

1

Leaked or at risk

56.5K

56,487

Downtime

Unknown

People affected or at risk

56.5K

56,487

Discovery and leak

SMBC Nikko administers employee stock ownership plans for companies and provides the plans and their members with a management system. On 9 November it found unauthorized access to this system, cut access and stopped the service the same day. Its investigation then confirmed that member data of some plans leaked. [1]

Items that may be affected, varying by member: plan name, invested stock, member ID, name, address, dividends and taxes, holdings and the transfer bank account. Phone numbers and emails are not stored in the system. Up to 56,487 members are affected; no secondary harm has been confirmed. Resumption will be announced individually and on the website. [1]

Timeline

  1. Detected 2026-11-09
  2. Disclosed 2026-11-11
  3. 2 days

Attack or cause

Method
[Intrusion]
Impact
[Data leak][Service outage]
Entry point
Unknown

Data exposed or at risk

[Name][Postal address][Member or customer ID][Bank account]

Organizations involved

Sources

  1. [1][Official]当社持株会管理システムへの不正アクセスによる個人情報の漏えいについてSMBC Nikko Securities Inc. · 2026-11-11