Securitize Japan breach exposes digital securities customer data
Customer information for digital securities from several client companies was exfiltrated from Securitize Japan after administrative privileges were seized by exploiting a vulnerability in its authentication functionality. Those affected included 621 Sony Bank customers and up to 9,086 Marui Group applicants, with the exposed data including names, addresses, contact details, dates of birth, investment information and some account information. Client companies including NTT DATA, Sony Bank and Marui Group disclosed the leaks.
Key facts
- Affected organization
- Securitize Japan
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer information leaked, including data on 621 Sony Bank customers and up to 9,086 Marui Group applicants
- Cause / method
- Administrative privileges seized by exploiting a vulnerability in authentication functionality
- Location
- Japan
If your data was exposed
Exposed dataNameAddressPhone numberDate of birthBank accountUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
Timeline
- The seizure of administrative privileges through an authentication vulnerability and the exposure of digital securities customer information from several companies were disclosed.
- Details of customer data leak announcements by client companies including NTT DATA, Sony Bank and Marui Group were made public.
Also affected by this incident
Vendor breach exposes personal data of 621 Sony Bank customers
↳ Knock-on damage from the Securitize Japan incident · View original incident621Impact: Personal information of 621 customers
Securitize Japan, which handles digital securities operations for Sony Bank, was breached, exposing the personal information of 621 Sony Bank customers. Names, addresses, dates of birth, and account numbers were exposed for four customers, while only names were exposed for the remaining 617. Reports indicated that administrator privileges had been seized through an authentication flaw and customer information had been exfiltrated, and digital securities trading was temporarily suspended.
Related reports: 4 · last report →
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.