The companies, products and regulatory developments shaping the broker industry.
The settled record links four repeat-incident offices to approximately 2,952 of 8,500 affected individuals. Its wider lesson concerns how a national brokerage enforced controls across a member-owned network.
Different disclosure thresholds and interrupted notifications complicate the broker response as Arara revises the wider incident to 81.3 million email addresses taken or potentially taken.
MAS is consulting on a staged cryptographic transition for Singapore financial institutions; its proposed dates are supervisory expectations, not enacted legal deadlines.
Tokyo-server positions and balances are scheduled to move to MT5 over 14–15 November. The account transfer will not convert MT4 trading robots, indicators or templates.
OANDA Japan required an authenticator for MT5 from 31 October after a hosted desktop intrusion; GMO’s 26,739 figure refers to potentially affected servers, not confirmed compromised brokerage accounts.
The annual programme flags financial responsibility, supervision, AML, tokenisation and operational resilience; it is a risk-based examination agenda, not a new rulebook.
Britain’s FCA points firms to NCSC post-quantum planning milestones and is trialling supervisory assessments. These milestones are guidance, not evidence that quantum attacks are currently breaking bank systems.
The depository inspection order identifies control deficiencies in pledge communications, endpoint protection and disaster-recovery logging, while rejecting one basic-account allegation.
The exchange’s incident log records cancel-only mode from 18:05 to 19:05 UTC on 29 October. It attributes the problem to a compromised third-party provider and says affected users will be made whole.
A 26 October update moves the incident beyond possible credential exposure. GMO has separately announced compensation for verified trading losses and warned that password changes may leave existing sessions active.
The promotion follows an expanding remit across security, data, compliance, finance and antifraud. Deriv’s 75% workflow-automation figure remains an end-2026 target.
The planned overhaul follows a review of patches, access controls and round-the-clock monitoring.
Onamae.com Desktop Cloud identified 26,739 potentially affected server instances. The immediate issue is continuity of terminal-based automation; its published outage-credit scheme also has conditions that matter to customers.
The Japanese brokers describe different failures across onboarding, research tools and trade administration. Their notices show why a service interruption, leaked contact details and an executed order require separate treatment.
The proposal published on 20 October would bring connected service providers into a clearer incident and reconnection process. Clearing members remain responsible for obligations during a disconnection.