Daishin Securities hacked in attack via external app integration server... “No secondary damage to date”

[Financial News] Daishin Securities, which suffered a leak of the personal and credit information of about 38,000 customers, said a comprehensive investigation had found no secondary damage from the leak to date. The company also said hackers had not illegally accessed its core business systems.
According to Daishin Securities on the 28th, a total of 38,490 customers had their information leaked in the incident. In conjunction with the Financial Security Institute, the company investigated the scope of the breach and reviewed all of the roughly 60,000 signals disguised as normal service over a 10-day period.
A Daishin Securities official said, “No secondary damage has been identified to date,” adding, “We understand that the attack did not come through the MTS, HTS or website.”
The incident occurred on an integration server connecting apps used by external investment advisory and discretionary management firms so their customers could open Daishin Securities accounts. Immediately after detecting signs of abnormal access to the server on the 17th, Daishin Securities blocked the IP address used in the attack and IP addresses used for indirect access, and reported the incident to the regulatory authorities.
A follow-up investigation confirmed on the 26th that eight categories of information had been leaked, including customers’ names and email addresses, home addresses, communications IDs, bank names, deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers, and mobile phone numbers. Some information, including account numbers and mobile phone numbers, was encrypted.
Daishin Securities said further verification was needed to determine whether the incident was connected to recent hacks targeting the banking sector or whether AI had been used in the attack.
Daishin Securities plans to notify each affected customer individually of the information leaked and take appropriate measures if any harm is confirmed. It will compensate customers who suffer losses as a result of the leak of personal and credit information in accordance with applicable laws and procedures.
To prevent a recurrence, the company plans to strengthen access controls and systems for detecting and blocking abnormal activity on the server, and expand security vulnerability checks for externally connected systems.   
[email protected] Bae Han-geul Reporter