TradeWaltz: intrusion with an access key stolen from a contractor; 130 trade documents leaked

Unauthorized outside access to TradeWaltz was detected at about 10:00 on 10 November. At 14:30 the production and training environments were stopped, accounts that had been misused or created by the intruder were deleted, and source IP addresses were restricted. Log analysis confirmed intrusion into both environments. [1]

Early on the 11th, part of the trade documents held for customers was found to have leaked: 130 documents as of 08:00. The cause was an attack on a server run by an unaffiliated contractor, where a system administration access key for TradeWaltz was stored and then misused. The scope of the leaked data is still under investigation, and affected customers will be contacted individually. [1]

TradeWaltz for Grain Importers and TradeWaltz for Export Documentary are not affected and remain available. The main service will restart once its safety is confirmed. [1]