CFTC cyber-related incident at ION Cleared Derivatives

The cyber-related incident at ION Cleared Derivatives, a subsidiary of ION Markets, occurred on 31 January 2023 . As a result, the firm suffered a data breach, in which sensitive customer data, including contact and financial information, had been exposed. This incident has resulted in significant disruptions to the flow of derivative data from the firm to the Commodity Futures Trading Commission (CFTC).

In addition to the financial loss incurred by ION, the incident has caused delays in the submission of derivatives data by other firms to the CFTC. The lack of timely and accurate data submissions has resulted in gaps in the regulatory oversight of derivatives trading.

In response to the incident, ION has adopted a series of security measures, including enhanced encryption, two-factor authentication, and further review of third-party vendors. It has also implemented a comprehensive incident response plan to ensure the security of its systems and customer information.

The CFTC has also taken a number of steps to minimize the disruption of derivatives data submissions. It has adopted an amendment that allows firms to use alternative methods to submit derivatives data, such as manually entering the data into an alternate system. Furthermore, it has provided guidance to firms on how to handle cyber-related incidents and secure their systems.

The incident at ION has demonstrated the vulnerability of derivatives data to cyber-attacks, highlighting the need for firms to secure their systems and ensure the integrity of data submissions. Firms should continue to follow the guidance provided by both ION and the CFTC to ensure their systems are secure and the flow of derivatives data is uninterrupted.