OANDA Japan Confirms Unauthorized Trades After VPS Breach, Restricts Accounts

OANDA Japan confirmed on October 26 that third parties had accessed and conducted unauthorized trades in some customer accounts using login credentials that may have leaked from an external service.

The broker said it had restricted trading on potentially affected accounts to prevent further damage and was contacting those customers individually.

Account Restrictions Follow Earlier Withdrawal Delays

The update follows BrokersView’s earlier report on OANDA Japan’s withdrawal delays. On October 22, the broker temporarily held withdrawal requests for security checks intended to prevent unauthorized withdrawals. It scheduled those received by 11 a.m. that day for processing on October 23.

The incident concerns Onamae.com Desktop Cloud, an external virtual private server service provided by GMO Internet Group. Traders use the service to run MT4, MT5 and automated trading programs around the clock. OANDA Japan’s initial notice warned that customers’ account IDs and passwords stored in that environment may have been exposed.

In its latest notice, OANDA Japan said it had found no evidence, at that stage, of unauthorized access to or information leakage from its own core systems. The company attributed the account intrusions to misuse of credentials stored on external VPS servers.

Customers Urged to Secure Trading Accounts

OANDA Japan urged customers to change their account and MT4/MT5 passwords, enable two-factor authentication and review their trading histories. Customers who identify suspicious activity should contact support immediately.

The latest notice also recommends setting up a passkey for the customer portal. It does not disclose the number of affected accounts or the value of unauthorized trades.

Follow BrokersView for broker risk updates, security alerts and investor protection news.

Related Reading

• OANDA to Transfer Prop Trading Business to FTMO by End-March
• FTMO Completes OANDA Acquisition Deal