OANDA Securities Delays Some Withdrawals After Hosting Security Incident

OANDA Securities is delaying some customer withdrawals for security checks after an incident at a trader hosting service raised concerns that brokerage login details may have been viewed.

The Japanese brokerage’s review covers withdrawal requests received by 10 p.m. ET Oct. 21 (Oct. 22, 0200 UTC). Processing is scheduled to begin at 10 p.m. ET Oct. 22 (Oct. 23, 0200 UTC). Funds are expected in customers’ registered bank accounts by 3 a.m. ET Oct. 23 (0700 UTC).

The warning concerns customers who used MetaTrader 4 or MetaTrader 5 through Onamae.com Desktop Cloud, a server service used to run trading software. Login IDs and passwords for some OANDA accounts may have been viewed. Affected customers were asked to change their brokerage and trading-platform passwords, enable two-factor authentication and review their trade histories.

Unauthorized programs were installed in some customer server environments on the service, which is operated by GMO Internet. GMO Internet began shutting down all Desktop Cloud plans at 3 p.m. ET Oct. 20 (1900 UTC). A total of 26,739 servers may have been affected. No restart date has been announced.

Later withdrawal requests received by 10 p.m. ET Oct. 22 (Oct. 23, 0200 UTC) are scheduled for normal processing.