IG Japan Confirms Potential Data Exposure of 163K Clients, but No ‘External Leak’

Wait 5 sec.

IG Securities, alsoknown as IG Japan, issued an apology today (Monday) after identifying improperhandling of customer “specific personal information,” including My Numberidentification data.SingaporeSummit: Meet the largest APAC brokers you know (and those you still don't!).The company said twoissues were identified. First, some employees within IG Group had unauthorizedinternal access to customer data through an internal system. The informationincluded names, dates of birth, addresses, contact details, and My Number data.The start date of this access issue is not known.Second, customer datawas stored on an external server managed by IG Markets Limited without priorapproval from IG Securities. This occurred around late January 2026. Thecompany stated that the cloud provider itself could not access the stored data.ContractorOversight Failure Behind IG Japan Data IncidentIn total, 162,879customers were potentially affected by internal access, meaning their datacould be viewed within the group. A separate 29,734 customers had their datastored on the external server.IG Securities saidthere is no evidence of any external access or data leak outside the group.The company attributedthe incident to failures in oversight of its contractor, IG Markets Limited. Itcited a “misunderstanding” of the sensitivity of My Number data, insufficientaccess controls, and a configuration error during system development.External RecordsDeleted, Sensitive Data Moved LocallyThe internal accessissue was resolved on February 24, 2026. External server data was deleted onMarch 5, 2026. By March 27, 2026, all My Number-related data had beentransferred to systems located in Japan.As part of itsresponse, IG Securities said it will restrict data access to necessarypersonnel, store sensitive data domestically, strengthen contractorsupervision, and remove My Number data from shared internal systems.The company describedthe incident as a failure in data governance and control, adding that customerdata was exposed internally due to inadequate safeguards.Finance Magnates hasreached out to IG for comment on its disclosure. As of writing, no response hasbeen provided.This article was written by Tareq Sikder at www.financemagnates.com.