Nomura Securities and GMO Internet report major data breaches

Nomura Securities has announced a potential leak of customer email addresses following unauthorized access to a system managed by its subcontractor, Yumirink Co., Ltd. The breach involved the 'i-Port' portfolio management tool's email distribution service. While email addresses may have been compromised, Nomura stated that securities trading account information and portfolio data were not included in the leak. The company has advised customers to remain vigilant against suspicious emails and phishing attempts.

Separately, GMO Internet reported a significant security breach affecting its 'Onamae.com Desktop Cloud' service, which is used for automated foreign exchange (FX) trading. Hackers infiltrated the cloud environment, potentially compromising 26,739 servers. The attackers allegedly hijacked brokerage accounts at more than 70 different firms to execute unauthorized trades, in some cases draining accounts in seconds. GMO Internet has rejected extortion demands from the hackers and has committed to compensating customers for verified losses resulting from unauthorized trading.