Regarding reports from October 31 to November 1, posts claiming that Rakuten Securities suffered a breach exposing all customer data are either poorly researched or designed to generate clicks.
The unauthorized access occurred at a third-party provider of NTT Data, specifically its “Digital Securities Platform,” used for purchasing corporate bonds with special incentives.
The affected customers are those who purchased specific corporate bonds from KAGOME, West Japan Railway Company, and Kintetsu Group Holdings—totaling 362 transactions.
At this stage, there is no evidence that IDs, passwords, or other information required for transactions were compromised, and no unauthorized transactions have been confirmed.
Mitsubishi UFJ Morgan Stanley Securities also announced that the names and purchase amounts of 95 customers who bought Kintetsu corporate bonds may have been leaked, due to involvement with the same external platform.
The specific cause of the breach has not yet been disclosed.
Although the third-party provider of NTT Data involved in the breach has not yet issued an official statement, initial service launch announcements suggest it may be Securitize Japan (see Image 3).
Its parent company is Securitize ($SECZ), listed on the NYSE.