KUALA LUMPUR: The latest cybersecurity incidents reported by a few brokers have been contained and all trading and market operations continue as normal, with no evidence of unauthorised trading activity or financial loss, Bursa Malaysia says.
In the statement, Bursa Malaysia said it was informed by a few brokers that they had encountered cybersecurity incidents within their system component.
"The affected brokers have contained the incidents through immediate isolation of the component and implementation of their internal incident response controls.
"These reported incidents are limited to those affected brokers’ respective system, with no impact to the Exchange’s networks, platforms or infrastructure. All trading and market operations continue to function as usual," it said.
"The Exchange treats all cybersecurity matters with the highest level of vigilance.
"Immediately upon receiving these reports, we activated established cybersecurity response protocols and coordinated closely with the affected brokers to ensure rapid containment and remediation.
"The brokers are conducting full forensic investigations and will be submitting their reports through Bursa Malaysia’s supervisory channels. There has been no evidence of unauthorised trading activity or financial loss."
As a precautionary measure, Bursa Malaysia said it has also directed all brokers and selected vendors to conduct comprehensive screening of their systems.
"We have issued advisories and provided briefings to reinforce vigilance and ensure that these parties continue strengthening their cybersecurity safeguards," it added.
The latest disruptions come just under a year after a hacking incident in April 2025 that affected multiple trading accounts across several brokers. That episode prompted a series of initiatives aimed at boosting cybersecurity across the stockbroking industry.
Key measures implemented include the enforcement of multi-factor authentication (MFA) across all key Exchange interfaces, isolation protocols for affected systems, enhanced monitoring for early detection of suspicious activity, and strengthened incident response and escalation processes.
"These initiatives increased preparedness across the industry and enabled a coordinated response and rapid containment of incidents.
"The Exchange is also undertaking a comprehensive review of its IT Security Standards for brokers with the objective of enhancing overall cybersecurity resilience across the industry."
Bursa Malaysia said this review includes measures to strengthen brokers’ oversight of their information service vendors and ensure that critical systems are safeguarded against emerging threats. The enhanced framework is targeted to come into effect in the fourth quarter of 2026.
