Iwai Cosmo Securities: Unauthorized Trades Placed Through a Vendor's Admin Function, Despite Mandatory MFA
Attackers who hit Trade Works, the vendor that runs Iwai Cosmo Securities' online trading system, placed orders in seven customers' accounts on October 14, 2026 without logging in as them. Japan's top government spokesperson says the FSA has asked for a cause analysis.