After Bithumb, Hanyang Securities, Too... 'Daou Office' Becomes an Open Door for Hackers

[Financial News] A series of hacking incidents have occurred involving Daou Technology Inc.'s groupware solution, Daou Office.
 On the 3rd, according to sources in the securities industry and elsewhere, Hanyang Securities confirmed signs that some customer and employee information had been leaked in an external hacking incident on the 29th of last month. The leaked information comprised 15 customer information records, two records related to employees, and 14 items of other personal information. Specifically, names, resident registration numbers, driver's license numbers, account numbers, contact details, addresses, dates of birth, and email addresses were leaked; three resident registration numbers were exposed.
The hacking is believed to have occurred through the external groupware solution, Daou Office. Hanyang Securities said it blocked external access immediately after becoming aware of the incident and completed an emergency security patch with the solution provider. The exact timing of the hack is still being determined, and the specific scope and circumstances of the leak are under investigation.
A hacking incident also occurred on the 27th of last month at Bithumb, which uses the groupware system Daou Office. An unauthorized external party accessed Daou Office and removed stored personal information and files without permission. Customer information relating to a total of 6,444 people was leaked. The exposed information included names, mobile phone numbers, email addresses, resident registration numbers, driver's license numbers, account numbers, and copies of identification documents, among other items. Personal information belonging to 715 people, including employees and staff of partner companies, was also leaked.
Daou Office is a system used for messaging among employees and sharing work materials, and it operates separately from the securities and virtual-asset trading services used directly by customers. Bithumb has also called for stronger security since the information leak at Daou Office.
A source in the financial investment industry said, "Rather than the company's trading servers having been hacked, you should understand it as information exchanged during the electronic payment process having been leaked."


[email protected] Han Young-jun Reporter