Cybersecurity in Securities Industry & Hacking Modus Operandi
📌 Cyber security threats in the financial industry, particularly in securities trading, have become more prominent, with a noticeable pattern shift in Q4 of last year (2023).
🚨 The two main categories of hacking/fraud are account breaches (broker account compromised) and RDN breaches (Securities Fund Account compromised), which operate differently.
💸 Account Breaches often result from client error like clicking phishing links (via WhatsApp or email) or falling for fake customer service calls, leading to credential theft (username/password/PIN).
⚙️ RDN Breaches are more sophisticated, involving attackers inserting themselves into the electronic connection between the brokerage and the RDN bank, mimicking legitimate instructions to transfer funds out.

Mitigation Strategies and Broker Responsibility
🛡️ For account breaches, the recommended defense is strong password hygiene (avoiding easily guessable credentials like birthdays) and robust Two-Factor Authentication (2FA).
📱 For RDN breaches, the expert suggests a decoupling architecture where the primary device must explicitly authorize any new device access, making it much harder for attackers using stolen credentials/email OTPs to withdraw funds.
🏦 Brokers should maintain high Minimum Working Capital (MKBD) and transparency; one broker noted being able to cover a Rp 300 billion loss instantly, while smaller brokers face closure if hit similarly.
📞 Investors should always do their homework by asking brokers about security protocols for changing critical data (email, phone, password) before opening an account.

Key Points & Insights
➡️ RDN theft is often executed during off-hours or holidays, frequently in small, repeated amounts, making the loss instantaneous upon transfer authorization.
➡️ If an account breach is detected quickly (within 2 working days), some funds may still be recoverable because transactions are visible on the stock exchange system (Bursa).
➡️ Investors should treat selecting a brokerage similar to selecting a primary bank: Do your homework on security features, as being popular or established does not guarantee immunity from hacking.

📸 Video summarized with SummaryTube.com on Dec 29, 2025, 14:01 UTC