Last updated
Sumitomo Mitsui Banking Corporation (SMBC): Cybersecurity Incident
A cyberattack on third-party email service provider Arara Inc. exposed 227,216 email addresses of recipients of SMBC emails sent between 1 July and 31 October 2026. No account numbers, balances, PINs or login credentials were reported exposed. SMBC is working with Arara on root cause and impact and plans to report to authorities.
Source: Fintechnews Singapore
- Who
- Sumitomo Mitsui Banking Corporation (SMBC) · Japan
- What happened
- A cyberattack on third-party email service provider Arara Inc. exposed 227,216 email addresses of recipients of SMBC emails sent between 1 July and 31 October 2026. No account numbers, balances, PINs or login credentials were reported exposed. SMBC is working with Arara on root cause and impact and plans to report to authorities.
- When
- 2026-11-09
- Source
- Fintechnews Singapore
Market context: MitchelLake's Talent Market Index sits at 97.8 (Neutral), down 3.2 on the prior month; Asia hiring signal is running rising (+4.2pts).
Sumitomo Mitsui Banking Corporation (SMBC): 1 signal in the last 90 days.
MitchelLake in this thematic
More signals across Asia
Cybersecurity Incident · Asia
Iris Ohyama →Japanese manufacturer Iris Ohyama, operator of the Iris Plaza shopping platform, disclosed that personal data of about 7.7 million people may have been exposed through unauthorized access to a third-party cloud service it uses.
Cybersecurity Incident · Asia
Doctor Anywhere →Singapore telehealth provider Doctor Anywhere disclosed a data breach caused by a 'malicious cyber incident' involving an unknown third party. The number of affected customers and the type of data compromised have not been disclosed.
Cybersecurity Incident · Asia
Gopax →South Korean crypto exchange Gopax halted trading after receiving hacking threats, a precautionary security suspension rather than a confirmed breach.
Cybersecurity Incident · Asia
Stockal →Stockal, an Indian platform for investing in US stocks, faces allegations that an unauthorised third party accessed around 26 customer accounts using valid login credentials. Holdings in about 13 accounts were allegedly liquidated and reinvested in thinly traded Zhibao Technology microcap shares, with investor-reported losses reportedly above INR 100 Cr. An FIR has reportedly been registered in Bengaluru.
Cybersecurity Incident · Asia
Mirae Asset Securities →South Korean brokerage Mirae Asset Securities disclosed cyberattacks that leaked account numbers for about 3,800 customers and personal data for 35,255 current and former employees and contractors, including names, employee IDs, emails, phone numbers and passwords.
Cybersecurity Incident · Asia
Philippine Overseas Employment Administration →Government migrant-worker agency in the Philippines likely suffered a data breach: an unknown operator appears to have exfiltrated about 69GB of SQL Server backups in under 30 minutes, exposing migrant worker data.
Where this lands in our work
- Executive Search →
A breach puts the security, technology and risk seats under review; those searches run through our executive search practice.
- Scale-up →
Regulated-market scale-ups add leadership layers earlier than their headcount implies.
- Executive Search: Asia →
Our Asia practice runs the searches behind signals like this one.
Intelligence powered by Autonodal ↗