Iris Ohyama

Cybersecurity Incident · Asia

A cyberattack on third-party email service provider Arara Inc. exposed 227,216 email addresses of recipients of SMBC emails sent between 1 July and 31 October 2026. No account numbers, balances, PINs or login credentials were reported exposed. SMBC is working with Arara on root cause and impact and plans to report to authorities.

Cybersecurity Incident · Asia

Singapore telehealth provider Doctor Anywhere disclosed a data breach caused by a 'malicious cyber incident' involving an unknown third party. The number of affected customers and the type of data compromised have not been disclosed.

Cybersecurity Incident · Asia

South Korean crypto exchange Gopax halted trading after receiving hacking threats, a precautionary security suspension rather than a confirmed breach.

Cybersecurity Incident · Asia

Stockal, an Indian platform for investing in US stocks, faces allegations that an unauthorised third party accessed around 26 customer accounts using valid login credentials. Holdings in about 13 accounts were allegedly liquidated and reinvested in thinly traded Zhibao Technology microcap shares, with investor-reported losses reportedly above INR 100 Cr. An FIR has reportedly been registered in Bengaluru.

Cybersecurity Incident · Asia

South Korean brokerage Mirae Asset Securities disclosed cyberattacks that leaked account numbers for about 3,800 customers and personal data for 35,255 current and former employees and contractors, including names, employee IDs, emails, phone numbers and passwords.

Cybersecurity Incident · Asia

Government migrant-worker agency in the Philippines likely suffered a data breach: an unknown operator appears to have exfiltrated about 69GB of SQL Server backups in under 30 minutes, exposing migrant worker data.