{"url":"https://newsforagent.com/news/2026-10-21/iwaicosmo-securities-cyberattack-unauthorized-trades","markdown_url":"https://newsforagent.com/news/2026-10-21/iwaicosmo-securities-cyberattack-unauthorized-trades.md","title":"IwaiCosmo Securities Hit by Cyberattack, Unauthorized Trades","headline":"IwaiCosmo Securities Cyberattack Triggers Unauthorized Trades in Seven Accounts","description":"IwaiCosmo Securities disclosed a cyberattack that allowed unauthorized trades in seven customer accounts and exposed personal data of 4,975 people.","section":"Incidents","published_at":"2026-10-21T07:43:03+00:00","modified_at":"2026-10-21T07:43:03+00:00","author":"News Desk","key_takeaways":["IwaiCosmo Securities said unauthorized orders were placed in seven customer accounts, with trades executed in five.","Personal information on 4,975 people, including names and email addresses, was exposed in the breach.","Trade Works, which operates the trading system, detected the attack on October 14 and imposed access restrictions."],"companies":[{"name":"IwaiCosmo Securities","is_primary":true,"profile_url":null,"website":"https://www.iwaicosmo.co.jp"},{"name":"TRADE WORKS","is_primary":false,"profile_url":"https://akta.pro/company-profiles/003k4cu/trade-works","website":"http://www.tworks.co.jp"}],"source":{"publisher":"EIN Presswire","title":"Unauthorized trades triggered at IwaiCosmo by cyberattack | The Asahi Shimbun: Breaking News, Japan News and Analysis","url":"https://www.einnews.com/article/951165136/live"},"other_sources":[{"publisher":"Rankiteo Blog","url":"https://blog.rankiteo.com/trayan-jing-ko1792521156-iwaicosmo-securities-trade-works-breach-october-2026/"},{"publisher":"Yahoo","url":"https://www.yahoo.com/news/us/articles/data-breach-involving-klein-isd-120423704.html"},{"publisher":"Rankiteo Blog","url":"https://blog.rankiteo.com/vmw1792500482-vmware-vulnerability-october-2026/"},{"publisher":"TechRadar","url":"https://www.techradar.com/pro/security/kasperskys-vpn-and-password-manager-went-dark-for-days-worldwide-and-the-timing-has-raised-awkward-questions-about-russias-drone-hit-data-centers"}],"tags":["Incidents","IwaiCosmo Securities","TRADE WORKS"],"body_markdown":"Osaka-based brokerage IwaiCosmo Securities Co. Announced on October 20 that a cyberattack on its online trading system allowed unauthorized trades in customer accounts and exposed the personal data of 4,975 people. The company said unauthorized orders were placed in seven customer accounts, with trades executed in five. [EIN Presswire](https://www.einnews.com/article/951165136/live) carried the announcement.\n\n## How the IwaiCosmo Securities Breach Unfolded\n\nIwaiCosmo Securities and Tokyo-based Trade Works Co., which operates and maintains the system, disclosed the incident. An investigation found that personal information on 4,975 people, including names and email addresses, had been exposed. The company said it had contacted affected customers and restored the accounts to their pre-trade status, leaving them with no losses.\n\nTrade Works said it detected the attack on October 14 and immediately imposed access restrictions. The company said the trades were unrelated to the leaked data and that no online trading passwords or other credentials appeared to have been compromised. The system remains in operation after security measures were strengthened to block unauthorized communications.\n\n\"While continuing monitoring and inspections, we are working to determine the cause and prevent a recurrence,\" said a corporate planning official.\n\nCybersecurity expert Masakatsu Morii, professor emeritus at Kobe University, said the incident appeared to be unlike typical data breaches. \"I have never heard of a case like this in Japan. It is an attack on a completely different level from the leakage of personal information,\" Morii said. He said he was not aware of previous cases in Japan in which attackers infiltrated a financial institution's system and manipulated transactions.\n\n[Rankiteo Blog](https://blog.rankiteo.com/trayan-jing-ko1792521156-iwaicosmo-securities-trade-works-breach-october-2026/) reported that the breach exposed sensitive client information and that affected accounts were later restored. Trade Works, which also provides online trading services for other financial institutions, said no similar incidents had been detected among its other clients as of October 20.\n\n## Other Data Incidents at Klein ISD, VMware and Kaspersky\n\nNearly 38,000 Klein ISD employees may have had their personal information exposed in a data breach targeting a third-party software provider, [Yahoo](https://www.yahoo.com/news/us/articles/data-breach-involving-klein-isd-120423704.html) reported on October 20. The exposed data includes Social Security numbers, driver's license numbers, and home addresses, and the software company will offer two years of free credit monitoring to affected individuals.\n\n[Rankiteo Blog](https://blog.rankiteo.com/vmw1792500482-vmware-vulnerability-october-2026/) reported that a ransomware attack by BlackMamba struck critical infrastructure in Germany, France, and the Netherlands on June 12, 2024, exploiting a zero-day flaw in VMware ESXi hypervisors, with at least 15 organizations affected.\n\n[TechRadar](https://www.techradar.com/pro/security/kasperskys-vpn-and-password-manager-went-dark-for-days-worldwide-and-the-timing-has-raised-awkward-questions-about-russias-drone-hit-data-centers) reported that Kaspersky's VPN, password manager, Safe Kids, and My Kaspersky portal went dark worldwide from October 11 to 14, affecting users on four continents.\n\n## What Comes Next for IwaiCosmo Securities\n\nIwaiCosmo Securities said it is continuing monitoring and inspections while working to determine the cause and prevent a recurrence. Trade Works said no similar incidents had been detected among its other clients as of October 20.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}