Skip to content

Which companies just had a verified incident, who lends to them and who owns them. Every claim carries its evidence level and its source. How we decide what is confirmed

Global Financial Service Disruptions

OANDA Japan (OANDA Securities)

brokerage · JP · East Asia · OANDA Securities Co., Ltd.

Confirmed cyberStatus: recoveringTier 1Severity 2 of 5Evidence confidence: highAnalyst-verified

OANDA Japan held all client withdrawals requested on 22 Oct 2026 for security checks after the GMO Internet VPS breach exposed clients' MetaTrader logins, releasing them on 23 Oct. On 26 Oct it confirmed unauthorized trades and restricted affected accounts. Five Japanese FX firms reported customer damage to the FSA.

First disruption
Oct 22
First public signal
Oct 22 (broker notice reported by Finance Magnates 07:11 GMT)
Acknowledged
Oct 22
Restored
Oct 23
Duration
not established
DFX first recorded
Nov 5 14:58 UTC

What was restricted

withdrawalstradingScope: institution wide

All withdrawals requested 22 Oct held and processed from 11:00 JST 23 Oct after checks; on 26 Oct OANDA confirmed unauthorized trades in some accounts and restricted trading on affected accounts.

Financial impact: Unauthorized trading losses undisclosed

Cause, kept in separate layers

What the institution said
Unauthorized access at an external service (GMO Onamae.com Desktop Cloud VPS) may have exposed clients' MetaTrader logins; withdrawals held for security checks to prevent unauthorized payouts.
DFX classification
Confirmed cyber (cyber: confirmed)
Analytical hypothesis (not established)
Downstream of the confirmed GMO Internet VPS intrusion; OANDA itself not reported breached.

Dependencies

A dependency is a documented relationship. It is not evidence that the provider was compromised.

  • Provider: GMO Internet (Onamae.com Desktop Cloud) (VPS host where clients stored MetaTrader credentials), verified

Evidence