2020 Saxo Bank Securities (Japan) — third-party server compromise; ~750 clients with confirmed leaked PII
Data compromised
Names, addresses, DOB, contact details, bank account information, and identity-verification documents per company and trade summaries
Technical writeup
Saxo Bank Securities Co., Ltd. (Japanese subsidiary) publicly documented a July 2020 cyber incident involving unauthorized access to infrastructure operated by an external provider associated with customer onboarding / account-management workflows (described in vendor Q&A materials as a customer-information system tied to deposit-withdrawal tooling rather than core trading engines). The firm stated tens of thousands of customer rows could have been present on affected systems while confirming leaked data for 750 clients, including identity and banking verification attributes. Remediation narratives included server shutdown, migration to internally managed systems, and tightened account protections.
Root cause
Compromise of third-party–hosted systems processing customer records