IwaiCosmo Cyberattack Triggers Unauthorised Orders in Seven Accounts

Osaka, 21 October 2026 – IwaiCosmo Securities said a cyberattack involving TradeWorks, an outsourced system operations and maintenance provider, generated unintended orders in seven customer accounts on 14 October. Trades were executed in five of those accounts, according to the brokerage’s second incident report issued on 20 October.

For Asian financial institutions and investors, the incident matters because a compromise at a technology supplier can reach customer trading activity even when login credentials or personal data are not the apparent route of attack. IwaiCosmo said the unauthorised transactions did not result from leaked personal information, and that affected positions were restored without customers bearing losses. Those are company-reported findings, while the wider technical investigation remains important.