"Trading Account Breaches Aren't Widespread" — Bursa Malaysia Says After Hacks

Follow us on Instagram, TikTok, and WhatsApp for the latest stories and breaking news.

In a press statement, the Exchange confirmed that the breach was limited to a small number of client accounts tied to a few brokers, and stressed that its core trading and clearing systems remain secure.

"Bursa Malaysia Berhad confirms that the failed logins or unauthorised access and trades were confined to a limited number of client trading accounts from a few brokers, and is not 'widespread' as stated by some news outlets," the statement read.

The Exchange added that there have been no reports on unauthorised access and trades that occurred following the 22 April incident.

Rather than targeting investors directly, attackers appear to have exploited vulnerabilities within brokerage firm systems — raising serious questions about the robustness of back-end infrastructure.

Unusual trading activity was observed in stocks like Bina Puri Holdings and Pos Malaysia, with Bina Puri's warrant B alone surging 61% and generating potential profits of RM10 million.

Similar patterns were spotted in Hong Kong-linked structured warrants.

"Bursa Malaysia also confirms that the robustness and security of its trading and clearing systems are not compromised. The Exchange's priority is to keep the market accessible and orderly for all market participants, as continued operation of the market is vital to sustain investor confidence over the longer term," the statement read.

The Exchange, alongside the Securities Commission, is continuing its investigations, while trading system providers like N2N Connect have already issued new security advisories, urging brokers to geo-block foreign IPs.

Bursa Malaysia reiterated its commitment to protecting investors and ensuring an orderly market, as maintaining public trust remains critical.