๐๐๐ ๐๐ค๐ฅ ๐๐๐ ๐ป๐๐ก๐ ๐ฅ ๐๐๐๐๐ ๐๐๐ฃ๐๐ฆ๐ค๐ฅ, ๐๐ฆ๐ฃ๐๐ ๐ผ๐๐๐จ๐๐ฃ๐๐ฆ๐๐ ๐ป๐ฃ๐๐ฅ๐ฅ๐๐ฃ ๐๐๐ค๐๐๐๐๐ฃ๐ฅ?
First of all, I would not recommend anyone to do research on this in German forums, otherwise you will get serious doubts about the mental abilities of your fellow human beings. Most answers that can be found in forums etc. can be broken down to "does not happen". It simply lacks the creativity to imagine appropriate scenarios or one is not willing to think about unpleasant things.
I would also dissect the question again, it can finally take over your provider, as well as your account / deposit with this, by strangers.
๐๐จ๐ฆ๐ฉ๐ซ๐จ๐ฆ๐ข๐ญ๐ญ๐ข๐๐ซ๐ฎ๐ง๐ ๐๐๐ฌ ๐๐๐ฉ๐จ๐ญ
Now, in fairness, I have to admit, I don't know of any cases from Germany. But the simplest counterargument here is the low equity ratio. What is hardly available cannot be lost. If you take a look across the pond, you will find a lot. [1,2,3,4,5,6,7,8] In particular Robinhood stands out. [4,5,6]
๐๐จ๐ฆ๐ฉ๐ซ๐จ๐ฆ๐ข๐ญ๐ญ๐ข๐๐ซ๐ฎ๐ง๐ ๐๐๐ฌ ๐๐ซ๐จ๐ค๐๐ซ๐ฌ
Usually "only" user information is obtained and such a deep compromise allowing control of funds / assets is rare. Even in the recent Robinhood incident, "only" user data was stolen. I did a quick search and found the forex broker FXCM. This was compromised in 2015 and money was transferred from several customer accounts. The transfers were refunded / reversed. [9,10]
However, I would not necessarily infer security from the lack of incidents. If you cast the net a little wider, you will find dozens of incidents where banks have been compromised to the point where funds can be transferred or downright spat out at ATMs. My argument here would be that there are simply more interesting targets. You always look for the "low hanging fruit." Stealing value from the stock broker is simply more cumbersome than attacking a cryptoexchange or a traditional bank with ATMs. Because there are only 2 ways to withdraw value here: Via the banking system or via Stocks. Classical would be pump & dump of pennystocks to deduct profit as seller when dumping, see e.g. [1,7,8].
If someone is too uncreative to imagine a comprehensive compromise of a financial institution. I advise you to google Carbanak or Bangladesh Bank robbery.
๐๐จ๐ง๐๐๐ซ๐ฏ๐๐ซ๐ฆรถ๐ ๐๐ง?
Why does the whole shebang even matter if my junk is in the special assets anyway? If one's custody account is compromised, then trades are legitimized that remove values from the special assets aka ๐ช๐ค๐ฉ ๐ท๐ฆ๐ณ๐ฌ๐ข๐ถ๐ง๐ฆ ๐ข๐ญ๐ญ๐ฆ๐ด ๐ถ๐ฏ๐ฅ ๐ฌ๐ข๐ถ๐ง๐ฆ ๐ฆ๐ช๐ฏ๐ฆ๐ฏ ๐ธ๐ฆ๐ณ๐ต๐ญ๐ฐ๐ด๐ฆ๐ฏ ๐๐ฆ๐ฏ๐ฏ๐บ๐ด๐ต๐ฐ๐ค๐ฌ, which the attacker on the opposite side dumps into the ground. How much you are to blame and whether the provider will compensate you is probably a case-by-case question.
In the case that the provider himself would be compromised, he could send the orders as "legitimized by the customer" to the depository, then the shares are also gone for the time being. What is no longer there cannot be returned. This would probably be the most unlikely and complicated case. Presumably, the trades would "simply" be unwound. If the provider would not be able to give out the shares contrary to his obligation, then there is a compensation, 90% of the value & max. sum 20,000โฌ. [11] As already explained above, I consider such an event extremely(!) unlikely.
@Stewie hope this answers your question.
[1] https://www.wired.com/2008/09/from-riches-to/
[7] https://www.sec.gov/news/pressrelease/2016-127.html
[9] https://www.dw.com/en/us-forex-broker-compromised-in-cyber-attack/a-18756493
[10] https://www.reuters.com/article/fxcm-cyberattack-idUSL3N1213FH20151001
[11] https://www.bafin.de/DE/Verbraucher/Sicherungssysteme/sicherungseinrichtungen_node.html
