Daishin Securities customer data for 38,490 people leaked... “Compensation and measures to prevent recurrence”

[Financial News] The personal and credit information of more than 38,000 Daishin Securities customers was leaked. No signs of secondary harm or unauthorized access to core business systems have been confirmed so far, and Daishin Securities said it would put in place measures to protect affected customers and prevent a recurrence.
Daishin Securities said on the 28th that its internal investigation found that information belonging to a total of 38,490 customers had been leaked.
The incident came to light on the 17th after signs of abnormal access by a hacker were detected on a server linked to the opening of non-face-to-face securities accounts for discretionary investment management. Immediately after detecting the suspicious access, Daishin Securities blocked the IP address used in the attack and IP addresses used for indirect access, and reported the incident to regulatory authorities.
Daishin Securities then investigated the scope of the breach with the Financial Security Institute and examined all of some 60,000 signals disguised as normal service over a period of 10 days. As a result, it confirmed on the 26th that eight categories of information had been leaked: customers’ names, email addresses, addresses, communications IDs, bank names, deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers, and mobile phone numbers. Some information, including account numbers and mobile phone numbers, was encrypted.
No signs of secondary harm resulting from the information leak have been found so far, and it was determined that the hacker had not gained unauthorized access to core business systems.
Daishin Securities plans to notify each affected customer of the leaked information and take relevant action if any harm is confirmed. It will also compensate customers who have suffered losses due to the leak of personal or credit information, in accordance with the relevant laws and procedures.
To prevent a recurrence, Daishin Securities plans to strengthen access controls and systems for detecting and blocking suspicious activity on the server, and expand security vulnerability checks of externally linked systems.
Jin Seung-wook, CEO of Daishin Securities, said, “We take this leak of personal and credit information very seriously and deeply apologize to all our customers,” adding, “We will responsibly implement the measures needed to protect our customers and prevent a recurrence.” 

[email protected] Bae Han-geul Reporter