Skip to content
Stockal
Singapore1 source
Confirmed:Confirmed by the organisation, a regulator or a securities filing. First reported 6 Nov 2026.
Stockal confirms unauthorized trades in 13 customer accounts
Stockal confirmed that an unauthorized third party logged into 26 customer accounts using valid credentials, executing unauthorized trades in 13 accounts. No funds were withdrawn.
- Type
- Cyberattack
- Sector
- Finance
- Records
- 13 records claimed
- First reported
- 6 Nov 2026
- Latest source
- 6 Nov 2026
What to do
- Follow updates from the organisation itself rather than social media.
- If you have an account, change that password, and anywhere you reused it.
- Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
- Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
- If they are a supplier, ask for an incident summary and the indicators of compromise.
- Patch internet-facing systems first, especially VPNs, firewalls and file transfer software.
Not sure? Ask an assistant with the sources attached, or have a coding agent check your systems.
Check your systems for Stockal
Sources
1Confidence 70% that this is real and correctly placed. Locations are city centroids at best. Spotted an error? Report a correction.