Skip to content
Daiwa Securities Vendor Hack Exposes Data of 110,000 Clients

Daiwa Securities Vendor Hack Exposes Data of 110,000 Clients

First seen 5 Oct 2026, 11:26 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 5, 2026 at 12:27 UTC
  • •Unauthorized access to a contractor's server may have exposed data of 110,000 clients.
  • •Daiwa Securities confirmed that its own systems remain secure and unaffected.
  • •The breach is part of a growing trend of vendor-related data leaks in Japan.

Daiwa Securities Group reported a potential data leak affecting around 110,000 customers due to unauthorized access to a server managed by contractor Scala Communications. The breach, which was disclosed on October 5, 2026, occurred between October 1 and October 2, 2026, and involved personal information such as names and account numbers. However, Daiwa stated that the compromised data cannot be used for online transactions, and no suspicious activities have been detected. The company has not confirmed if the information has been disclosed or spread online. Daiwa's stock experienced a nearly 1% decline following the announcement. This incident highlights the increasing prevalence of vendor breaches in the financial sector.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-01
Unauthorized access detected
Scala Communications notified Daiwa of unauthorized access to its server, potentially compromising client data.
Briefs.Co
2026-10-02
Breach disclosed to Daiwa
Scala Communications alerted Daiwa Securities about the breach, confirming evidence of data leakage.
Briefs.Co
2026-10-05
Public disclosure of breach
Daiwa Securities publicly addressed the data leak, revealing the potential exposure of client information.
Asia.Nikkei

More articles in this cluster (4)

Following this threat?

Track Daiwa Securities Group in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (7)

1 / 3

Common questions

What type of data was exposed?
The exposed data includes client names, email addresses, and account numbers.
Is there any evidence of data misuse?
Daiwa Securities has not found any suspicious transactions related to the incident.
What steps is Daiwa taking in response?
Daiwa is investigating the breach and has issued an apology to affected customers and stakeholders.