Rakuten Securities: 362 Customer Records Possibly Leaked via NTT Data
Rakuten Securities says 362 customer records may have leaked after a contractor of NTT Data suffered unauthorized access. Logins and trading credentials were reportedly not affected.
Rakuten Securities announced on October 31 that information on a total of 362 customer records may have been leaked. The affected system is provided by a contractor of NTT Data and was accessed by a third party without authorization. The company has not said which data items may have been exposed.
NTT Data said it has suspended "STdirectServices", a service that grants perks to corporate bond buyers, in response to the intrusion.
Which customers are affected
The incident concerns some buyers of "corporate bonds with digital benefits" sold by Rakuten Securities. Three issues are involved: Kagome's first unsecured bond (issued February 21, 2023), West Japan Railway's 80th unsecured bond (issued June 19, 2024), and Kintetsu Group Holdings' 135th unsecured bond (issued July 24, 2026), the last only for customers who bought 1 million yen or more.
Although the exposed items are unclear, Rakuten Securities says its login IDs, passwords and the various pieces of information required for trading are not included.
Investigation and next steps
The unauthorized access took place on October 30, and NTT Data reported it to Rakuten Securities. The entry route and technical causes are still being investigated by NTT Data's contractor. Customers confirmed to be affected will be contacted individually.
The case shows how risk can sit in the supply chain: even when a brokerage's own systems are not breached, a subcontractor handling benefit services can become the weak point. Bond buyers should watch for notices from the company and be alert to suspicious messages that reference their purchases, particularly until the exposed data items are disclosed.
Apps worth a look
SUMO: the number puzzleTap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.
Dialo: learn languages by speakingTalk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.
ediviewer: read EDI files like documentsOpen EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.
More from this day
See all →
Claude Code: Anthropic tightens rules against game clones
Notebooksbilliger and Pÿur Confirm Data Leaks After Cyberattacks
Eloelo's Dolphin AI Targets Global Audiences for Indian Stories
