“Trading Account Breaches Aren’t Widespread” — Bursa Malaysia Says After Hacks
Its core trading and clearing systems remain secure.
Bursa Malaysia has reassured investors after a wave of unauthorised trades rattled confidence in the country's online trading platforms
In a press statement, the Exchange confirmed that the breach was limited to a small number of client accounts tied to a few brokers, and stressed that its core trading and clearing systems remain secure.
"Bursa Malaysia Berhad confirms that the failed logins or unauthorised access and trades were confined to a limited number of client trading accounts from a few brokers, and is not 'widespread' as stated by some news outlets," the statement read.
The Exchange added that there have been no reports on unauthorised access and trades that occurred following the 22 April incident.
Image via New Straits Times
The clarification follows media reports of a coordinated cyberattack, with suspicious activity traced back to foreign IP addresses
Rather than targeting investors directly, attackers appear to have exploited vulnerabilities within brokerage firm systems — raising serious questions about the robustness of back-end infrastructure.
Unusual trading activity was observed in stocks like Bina Puri Holdings and Pos Malaysia, with Bina Puri's warrant B alone surging 61% and generating potential profits of RM10 million.
Similar patterns were spotted in Hong Kong-linked structured warrants.
Image via NSTP/AIMAN HARIZ AZHAR
Bursa Malaysia also confirmed that the security of its trading systems are robust and weren't compromised
"Bursa Malaysia also confirms that the robustness and security of its trading and clearing systems are not compromised. The Exchange's priority is to keep the market accessible and orderly for all market participants, as continued operation of the market is vital to sustain investor confidence over the longer term," the statement read.
The Exchange, alongside the Securities Commission, is continuing its investigations, while trading system providers like N2N Connect have already issued new security advisories, urging brokers to geo-block foreign IPs.
Bursa Malaysia reiterated its commitment to protecting investors and ensuring an orderly market, as maintaining public trust remains critical.


Cover image via 