CSIDB logo
Incident

Nissan Securities

Incident posture

Attack window
Apr 2021
Location
Japan
Status
Historical
CIA posture
Available to members
Updated
2025-10-25 00:00

Linked entities

Victim
Nissan Securities
Threat actors
1 actor
Sources
1 source

Timeline

Occurred
Apr 2021
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

Nissan Securities experienced unauthorized access to its online trading system, impacting options and futures trading platforms including click 365 and click shares 365. The breach caused system damage, prompting the firm to disconnect the affected network and initiate restoration efforts. No adverse effects were confirmed on other networks, the company website, or additional trading systems, and there was no evidence of customer information leakage. The organization apologized for disruptions and committed to providing further updates as recovery work progressed.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

4 techniques

Description

On April 25, 2021, Nissan Securities experienced a cybersecurity incident involving unauthorized third-party access to its online trading systems. The breach specifically disrupted trading platforms handling options and futures on stock indexes, including the click 365 and click shares 365 services. In response to the intrusion, the company severed network connectivity to the compromised trading systems to contain the damage and initiated restoration efforts. No immediate adverse effects were confirmed on Nissan Securities’ other networks, including its public website or non-affected trading systems. The company issued a public statement acknowledging the incident and apologizing for service disruptions but did not disclose technical details regarding the attackers’ methods or point of entry. At the time of the announcement, Nissan Securities emphasized that customer information leakage had not been detected through its ongoing investigations.

The incident caused operational failures requiring sustained network isolation of the targeted trading platforms while recovery work progressed. Nissan Securities maintained functionality in its non-compromised systems throughout the response period. External cybersecurity publication SecurityNext noted the possibility of ransomware involvement in its coverage but clarified this assessment lacked explicit confirmation from Nissan Securities or definitive evidence in available disclosures. The company committed to providing further updates as restoration efforts continued, though subsequent resolution timelines and final forensic conclusions were not detailed in the initial announcement. Service interruptions remained confined to the directly impacted trading platforms without spreading to broader corporate infrastructure.

Sources

Sources available to members: 1 source.

CSIDB