Important information about your account security.
Dear Trader,
We're writing to you to let you know about a data security incident that has impacted certain people who have an ACY Securities live trading account.
Our investigations show the personal information (or personal data) about you that may have been impacted is limited to your:
- Name
- Contact details (such as email, phone number and physical address)
- Date of birth
We can confirm that any trading accounts and bank account information you have with us are safe. They have not been compromised.
We're extremely concerned this has happened. Keeping your ACY Securities account safe is our priority. Please be assured we've identified the cause of the incident, contained it, and put a number of measures in place to stop it from happening again.
What happened?
On 21 December 2020 (AEST) we discovered some of our clients received an email from unknown third party. In addition, similar email was sent on 23 Dec 2020. The email contained personal contact information about our certain clients. Criminals used malware to compromise a computer used by us to access client information. Before we rectified the issue, they were able to take a limited amount of personal information belonging to some of our account holders. Importantly, the criminals weren't able to access our trading environment or our financial systems, which are segregated from our client relationship management system. Our clients can continue to have confidence in using our trading systems safely and securely.
What has ACY Securities done to address this?
We first became aware of this issue on 21 December and immediately launched an investigation. We're also in communication with the national cyber-crime agencies and data privacy commissioners in our regulated jurisdictions.
What do I do now?
We encourage you to take the following steps:
- Reset your ACY Securities trading account password and your acy.cloud portal password
- Although we have no reason to suspect that your password has been compromised we strongly recommend that you change your other passwords as a precaution. For example, bank accounts, social media accounts, and email accounts.
- If you believe that your personal information has been used by a third party without your authorisation, report it to your local cybercrime agency
- Contact your bank immediately if you've sent money to a scammer or if you think you've provided confidential banking information to a scammer
- Don't allow any access by remote desktop viewers by any company, even if they claim to be ACY Securities.
- Don't respond to/click on any suspicious communications from people or organisations that you don't know
- Close any online accounts that you no longer use.
We understand that people will be concerned about this. We encourage you to contact us immediately if you have any suspicions or concerns about any communication you receive, on +61 2 91882999 or at support@acy.com
Finally, we want to reassure you that ACY Securities absolutely remains open for business, fully regulated and here to support your trading needs. If you want to discuss this matter further please don't hesitate to get in touch.
Kind regards,
The ACY Securities team
