Jamaica Stock Exchange reports personal data exposure after cyber incident

KINGSTON, Jamaica - The Jamaica Stock Exchange has disclosed that a recent cybersecurity incident led to unauthorised access to some personal information, while saying the matter has since been brought under control.

In a public advisory, the JSE said the issue was detected recently and contained. It said its investigation found that certain data had been accessed without permission.

The exchange said that, based on the probe so far, it has not found evidence that the incident reached its trading or settlement platforms, customer login details, or main transaction systems.

The JSE said the matter has been reported to the relevant authorities. It also said people affected by the incident are being contacted directly and will receive specific guidance.

The notice did not state how many individuals were impacted. It also did not identify the kind of personal information involved, when the incident happened, or whether the access was linked to internal systems, outside service providers, or both.

The exchange urged the public to remain cautious about possible fraud attempts. It reminded Jamaicans that it will not request passwords, PINs, or one-time codes by telephone or email, and said any such approach should be treated as fraudulent.

People seeking further information were told to reach the JSE's Data Protection Officer at [email protected] or by calling 876-218-1815.

The disclosure comes at a time when financial firms and market infrastructure operators around the world are under increasing pressure to improve cyber defences, given the sensitive data they manage and the possible impact any disruption could have on financial markets.

For now, the JSE's position is that personal information was affected, but the systems used to trade and settle securities were not compromised.