Tokyo, April 18, 2025 – A wave of unauthorized trading has recently impacted online brokerage accounts in Japan, raising significant concerns about the potential involvement of criminal groups manipulating stock prices through hijacked accounts. The issue first came to light in late March when Rakuten Securities reported a series of account takeovers.
Following Rakuten’s disclosure, other major firms including Nomura Securities and SBI Securities confirmed similar incidents, highlighting a broader trend of security breaches within the sector. The attackers reportedly employed phishing schemes, creating fraudulent websites that mimicked legitimate ones to steal user IDs and passwords, enabling them to impersonate customers and execute trades without consent.
Initial reports suggest that the attackers primarily targeted foreign stocks. In response to the breach, Rakuten Securities temporarily suspended buy orders for select Chinese equities. However, the ramifications of the attack have since extended to domestic stocks, prompting trading halts for certain names amid rising suspicions of illicit activity.
This series of incidents underscores the urgent need for enhanced cybersecurity measures in the financial sector, as brokerage firms face increasing threats from cybercriminals. The situation has prompted discussions among industry leaders regarding the implementation of more robust security protocols to protect customer accounts and maintain market integrity.
The ongoing investigation into these unauthorized trades is expected to reveal further details about the extent of the breaches and the methods employed by the attackers. As the situation develops, both customers and firms are urged to remain vigilant and take necessary precautions against potential phishing attempts.
This wave of unauthorized trading highlights the critical importance of cybersecurity in safeguarding financial transactions and protecting investors from fraud.