Mirae Asset Global Investments Investigates Information Leak from Some Business Web Systems with External Agency

[Financial News] An information leak caused by abnormal external access to some of Mirae Asset Global Investments’ business web systems has occurred, and an investigation is underway.
Mirae Asset Global Investments said on the 28th that it had activated its emergency response system after detecting signs of abnormal access from external IP addresses to some of its web systems.
Mirae Asset Global Investments blocked the related access routes and reported the incident to financial authorities. It is investigating the cause of the incident and the scope of its impact with an external cybersecurity specialist agency.
The company said the incident involved materials being viewed from outside without proper authorization, and that there had been no malware infection or service disruption.
According to Mirae Asset Global Investments, the scope of the leak confirmed so far consists of information used by some business systems. The company said those systems do not provide services to individual customers, so information about general customers and investors was not among the data affected by the leak.
The company said no unique identifying information, such as resident registration numbers, passport numbers, driver's license numbers or alien registration numbers, nor sensitive information or personal credit information, had been leaked.
Mirae Asset Global Investments said there had been no financial damage and that it had found no signs of direct infiltration of its servers or databases. Major systems and services, including the company website, are operating normally.
Immediately after becoming aware of the incident, the company used a web application firewall (WAF) to block overseas connections and attack IP addresses, and disabled the function used for the abnormal access. It limited the number of file downloads and login requests and also fixed vulnerabilities related to access-rights verification.
The company deactivated accounts created externally and took steps to protect accounts, including advising affected individuals to change their passwords as a precaution. It said it had reported the security incident to the Financial Services Commission and the Financial Supervisory Service, and had also filed a report with the Personal Information Protection Commission and individually notified the affected data subjects within the statutory deadlines.
A Mirae Asset Global Investments representative said, "We completed security measures for the vulnerability as soon as we became aware of the incident," adding, "We plan to closely analyze the cause of this incident with an external cybersecurity specialist agency and do everything possible to prevent a recurrence."

[email protected] Lee Jung-hwa Reporter