NEW YORK — Hackers broke into a Nasdaq service that handles confidential communications for about 300 corporations, the company said Saturday — the latest vulnerability exposed in the computer systems Wall Street depends on.
The intrusions did not affect Nasdaq’s stock trading systems and no customer data was compromised, Nasdaq OMX Group Inc. said. Nasdaq is the largest electronic securities trading market in the U.S., with more than 2,800 listed companies.
A federal official said the hackers broke into the service repeatedly over more than a year. Investigators are trying to identify the hackers, the official said. The motive is unknown. The official spoke on condition of anonymity because the inquiry by the FBI and Secret Service is continuing.
The targeted service, Directors Desk, helps companies share documents with directors between scheduled board meetings. It also allows online discussions and Web conferencing within a board. Because board directors have access to information at the highest level of a company, penetrating the service could be of great value for insider trading.
Nasdaq OMX spokesman Frank DeMaria said the Justice Department had requested that the company keep silent about the intrusion until at least Feb. 14. However, The Wall Street Journal reported the investigation on its website late Friday, prompting Nasdaq to issue a statement and notify its customers.
DeMaria said Nasdaq OMX detected “suspicious files” during a regular security scan on U.S. servers unrelated to its trading systems and determined that Directors Desk was potentially affected. It pulled in forensic firms and federal law enforcement for an investigation. They found no evidence that customer information was accessed by hackers.
Computer security experts have long warned that many companies aren’t doing enough to protect sensitive data, and recent events have underlined the point. The secret-spilling organization WikiLeaks has published confidential documents from banks in Switzerland and Iceland and claims to have incriminating documents from a major U.S. bank, possibly Bank of America.
