BigBoss - Trade Forex on up to 2222 Leverage and CFD

Dear Customers

Thank you for trading with BigBoss.

There have been recent reports on Saturday, October 24, 2026, suspicious phishing emails spoofing our official email address (support@mail3.bigboss-financial.com) and impersonating a credit card company were sent to a number of customers.

We sincerely apologize for any concern or inconvenience this incident may have caused.

Our internal investigations indicate that this issue stems from a cybersecurity breach at a third-party external vendor responsible for distributing our email newsletters in Japan.

Please be assured that the compromised data is strictly limited to the email addresses and names registered with the service. No other information has been exposed.

Please review the following details regarding the incident and the recommended security measures.

■ Overview
Date: 23nd October Fri around 11:00 PM (GMT +0)
Spoofed Sender: support@mail3.bigboss-financial.com
Email Subject:＜重要＞ご利用内容確認のご連絡
Content: The emails impersonate "Credit Saison Co., Ltd." and falsely claim fraudulent card activity to lure recipients to a malicious phishing site and prompts the entry of credit card details.

■ Cause and Investigation Status
It has been determined that this incident was caused by an unauthorized third-party intrusion into an external service used for distributing email newsletters to Japan.

External Service Status:
The external service provider has reported a potential leak of email addresses and names used for distribution among the data that may have been accessed.

Internal System Status:
Emergency investigations have been conducted on all systems independently managed and operated by BigBoss. At present, no traces of unauthorized access have been found within the internal systems.

■ For Recipients of the Email
To prevent potential damage, we strongly recommend recipients of the suspicious email to take the following actions:

・Do not click or open any links (URLs) contained within the email body.
・Do not enter any sensitive information such as credit card numbers, expiration dates, PINs, or login IDs/passwords.
・Do not reply to the email; please discard and delete it immediately.

■ If Information Was Entered on the Phishing Website
Please contact the respective credit card company directly and immediately to request procedures such as suspending card usage or having the card reissued.

■ Future Actions
BigBoss will never request the input of credit card information or PINs via email.

The scope of this breach continues to be thoroughly assessed in cooperation with the external vendor.
Should any new information require disclosure, prompt updates will be provided via our official website.

【Contact Us】
Customer Support
Email: support@bigboss-financial.com

【Second Report】Updated on October 26, 2026

Dear Customers

Thank you for trading with BigBoss.

The service provider, GMO Internet, Inc., has issued an official announcement regarding compensation procedures and other measures related to any losses incurred as a result of trading activities associated with this incident.

We kindly ask that you review the official announcement below for further details and contact the designated support desk directly should you require assistance regarding the compensation process or related inquiries:
https://www.onamae.com/news/article/11598

【Initial Report】 Updated on October 21, 2026

On October 21, 2026, GMO Internet, Inc. announced that unauthorized access by a third party had occurred in its “Onamae.com Desktop Cloud” service, resulting in the installation of malicious programs on the server environments of some customers.

In light of this announcement, to ensure the security of our customers’ accounts and assets and to prevent further damage, we strongly recommend that all customers—whether or not they are currently using the aggected service—immediately implement the following security measures.

For further details regarding this incident, please refer to the official announcement from GMO Internet, Inc.
https://internet.gmo/news/article/246/

【To Customers Using “Onamae.com Desktop Cloud”】

If you are currently using this service, please take the following actions immediately to prevent further damage:
・Disconnect from your VPS
・Change your trading password and MyPage password
・Review the official announcement from the service provider (GMO):
https://internet.gmo/news/article/246/

【To All Customers (Guide to Changing Passwords)】

To enhance account security, we strongly recommend that all customers change their passwords.

■ Password Change Procedure
(1) Log in to MyPage, click the user icon in the top right corner of the screen, and select "Change Password."
(2) Select the account you wish to change. (※For security reasons, we strongly recommend changing the password for all accounts you hold.)
(3) Enter your “New Password” and “Confirm Password,” then click the【Change】button.
(4) An email titled【BigBoss】Reset Password will be sent to your registered email address.

■ Important Notes on Password Settings
・Avoid easily guessable strings: Refrain from using strings that others can easily guess, such as your name, date of birth, or phone number.
・Use a complex combination: Set a complex password that is difficult for third parties to decode by combining uppercase and lowercase letters, numbers, and symbols.
・Prevent password reuse: Do not reuse past passwords or passwords from other services.
・Enable two-factor authentication (recommended): To ensure stronger security, we strongly recommend that you also set up “2-Step Verification (Login).”

We apologize for the inconvenience and appreciate your understanding and cooperation in protecting your valuable assets and personal information.

If you have any inquiries, please contact our Customer Support Team

Dear Customers

Thank you for trading with BigBoss.

Please be advised that emergency system maintenance will take place from 21st October Wed to 22nd October Thu, during which certain services on MyPage will be temporarily unavailable.

Our Email Support Service will also be suspended throughout this maintenance period. As a result, we will be unable to reply to email inquiries until the maintenance is completed.

For assistance during this period, please contact us via our Live Chat Support available on MyPage.

【Maintenance Schedule】
21st October Wed, 13:00 – 22nd October Thu 01:00 (GMT +0)
※End time may vary depending on the maintenance progress.

【Affected Services】
‐ Email Support Service
‐ User Registration
‐ Credit Card Registration Application
‐ Survey Management


We apologize for any inconvenience this may cause and appreciate your understanding and cooperation regarding the emergency system maintenance.

If you have any inquiries, please contact our Customer Support Team.
Thank you for your support.