ACY Securities Suffers Major Source Code Leak

ACY Securities is a prominent multi-asset CFD broker based in Australia, offering trading services across various financial instruments, including shares, forex, indices, and commodities. The company is known for its competitive trading conditions, including spreads starting from 0.0 pips, making it a preferred choice for traders worldwide.

Breach Details

• Date of Breach: November 5, 2023
• Discovered on: BreachForums
• Threat Actor: IntelBroker, a notorious administrator on BreachForums
• Leaked Data: Approximately 4GB of internal source code, including Python files, configuration files, and other critical assets
• Exposure Method: The threat actor uploaded the entire source code package on BreachForums, providing a direct download link for the community.

Threat Actor Profile

• Name: IntelBroker
• Role: Administrator on BreachForums, actively involved in leaking sensitive data
• Reputation: High (4,290 reputation points), indicating a significant presence and influence in the cybercriminal community.
• Notable Activity: Regularly involved in high-profile data breaches and leaks, targeting companies across various sectors.

Impact Analysis

• Business Impact: The exposure of ACY Securities' source code could lead to significant security vulnerabilities. Potential attackers might exploit the code to identify weaknesses in the platform, leading to further breaches, financial loss, and damage to the company's reputation.
• Client Impact: Clients of ACY Securities might face increased risk of phishing attacks, account breaches, and financial fraud, as attackers could use the leaked information to create sophisticated social engineering schemes.