Back Asia.Nikkei

Daiwa Securities' customer info leak may have come from hack

Asia.Nikkei • October 5, 2026

A data leak at Daiwa Securities that includes personal information on around 110,000 of its customers may have come from a hack of a server operated by a contractor, the company said on Oct. 5. © Kyodo

TOKYO (Kyodo) -- Daiwa Securities Group said Monday that data on around 110,000 customers of its securities brokerage unit and other nonpersonal information may have been compromised due to unauthorized access to its server operated by one of its contractors.

The company said that even if the information had been leaked, it would not be possible to conduct transactions, including online transactions, using the data.

The unauthorized access occurred between Friday evening and Saturday morning on a server operated by Scala Communications Inc., which provides Daiwa Securities with a service for managing online customer inquiries.

Information related to inquiries was stored on the server and may have been leaked. It includes personal information such as names, email addresses, and account numbers for 110,000 customers. Together with inquiries that do not include such information, around 220,000 pieces of data are potentially affected, the company said.

Daiwa Securities has not confirmed that any of the information has been disclosed or spread online.

Cybersecurity Japan banks uncover twice the vulnerabilities following Mythos AI release

Japan banks uncover twice the vulnerabilities following Mythos AI release

Cybersecurity Japan pushes banks to broaden cybersecurity oversight as AI risks grow

Japan pushes banks to broaden cybersecurity oversight as AI risks grow

Cybersecurity Japan's NTT Data teams with US company on AI for enterprise cybersecurity

Japan's NTT Data teams with US company on AI for enterprise cybersecurity

Cybersecurity Data from cyberattack on Japan frozen food supplier posted online

Data from cyberattack on Japan frozen food supplier posted online

Cybersecurity Meet the Japanese cybersecurity startup made mostly in India

Meet the Japanese cybersecurity startup made mostly in India

Artificial intelligence NTT, SoftBank eye AI cybersecurity systems that keep data in Japan

NTT, SoftBank eye AI cybersecurity systems that keep data in Japan

Companies Scandal-hit Nidec's new CEO long praised by founder Nagamori

Scandal-hit Nidec's new CEO long praised by founder Nagamori

Companies Daikin faces calls for cooler, leaner strategy as capital efficiency lags

Daikin faces calls for cooler, leaner strategy as capital efficiency lags

Companies Nidec's new chief blames expansion drive, profit chase for write-downs

Nidec's new chief blames expansion drive, profit chase for write-downs

Content This content was commissioned by Nikkei's Global Business Bureau.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Daiwa Securities Vendor Hack Exposes Data of 110,000 Clients Daiwa Securities Group reported a potential data leak affecting around 110,000 customers due to unauthorized access to a server managed by contractor Scala Communications. The breach, which was disclosed on October 5, 2026, occurred between October 1 and October 2, 2026, and involved personal information such as names and account numbers. However, Daiwa stated that the compromised data cannot be used for online transactions, and no suspicious activities have been detected. The company has not confirmed if the information has been disclosed or spread online. Daiwa's stock experienced a nearly 1% decline following the announcement. This incident highlights the increasing prevalence of vendor breaches in the financial sector. 3 sources 40

Extracted Entities

Daiwa Securities' customer info leak may have come from hack

The full story

Extracted Entities

Attack Types (1)

Companies (1)

Countries (1)

CWE Weaknesses (1)