Cyber Incident Victim: Nissan Securities
Date:
Apr 2021
Location:
Japan
Summary
Nissan Securities experienced unauthorized access to its online trading system, impacting options and futures trading platforms including click 365 and click shares 365. The breach caused system damage, prompting the firm to disconnect the affected network and initiate restoration efforts. No adverse effects were confirmed on other networks, the company website, or additional trading systems, and there was no evidence of customer information leakage. The organization apologized for disruptions and committed to providing further updates as recovery work progressed.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 4 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On April 25, 2021, Nissan Securities experienced a cybersecurity incident involving unauthorized third-party access to its online trading systems. The breach specifically disrupted trading platforms handling options and futures on stock indexes, including the click 365 and click shares 365 services. In response to the intrusion, the company severed network connectivity to the compromised trading systems to contain the damage and initiated restoration efforts. No immediate adverse effects were confirmed on Nissan Securities’ other networks, including its public website or non-affected trading systems. The company issued a public statement acknowledging the incident and apologizing for service disruptions but did not disclose technical details regarding the attackers’ methods or point of entry. At the time of the announcement, Nissan Securities emphasized that customer information leakage had not been detected through its ongoing investigations.
The incident caused operational failures requiring sustained network isolation of the targeted trading platforms while recovery work progressed. Nissan Securities maintained functionality in its non-compromised systems throughout the response period. External cybersecurity publication SecurityNext noted the possibility of ransomware involvement in its coverage but clarified this assessment lacked explicit confirmation from Nissan Securities or definitive evidence in available disclosures. The company committed to providing further updates as restoration efforts continued, though subsequent resolution timelines and final forensic conclusions were not detailed in the initial announcement. Service interruptions remained confined to the directly impacted trading platforms without spreading to broader corporate infrastructure.