OANDA Japan Halts Withdrawals Following Cyberattack on Popular FX Server Host

OANDA Japan has taken precautionary measures by temporarily halting client withdrawal requests following a security breach at a third-party server hosting provider. The brokerage announced that the step was necessary to protect account security and verify user assets after learning of unauthorized access.

The breach originated at Onamae.com Desktop Cloud, a popular rented server service operated by Japan's GMO Internet Group. Retail foreign exchange traders frequently use these virtual private servers to run MetaTrader 4 and MetaTrader 5 trading terminals, along with automated expert advisors, around the clock.

According to GMO Internet, the company detected unauthorized programs within customer server environments on Tuesday. In response, the provider initiated a shutdown of servers across all plans early Wednesday morning to contain the threat and assess the potential exposure.

Estimates suggest that up to 26,739 servers may be impacted by the ongoing shutdown. Because many traders store their MetaTrader login credentials and operational data directly on these virtual machines, the incident has raised concerns regarding account security across the broader retail trading community.

In light of the potential exposure of platform credentials, OANDA Japan acted swiftly to freeze withdrawal processing until comprehensive security audits can be completed. Affected traders are advised to monitor official updates from both their brokers and hosting providers regarding password resets and server restoration timelines.

As the investigation unfolds, the situation highlights the operational risks associated with third-party cloud infrastructure in retail trading. Traders utilizing automated strategies on remote servers are urged to remain vigilant, update their security credentials, and follow broker guidance closely as the situation develops.