Mirae Asset Securities Hacking Incident: Information of Around 39,000 Customers and Employees Leaked

[Financial News] Amid a series of hacking incidents in the financial sector, Mirae Asset Securities has also suffered an external attack that led to the leakage of customer and employee information.
According to Mirae Asset Securities on the 7th, external attacks targeted its mobile web phone-authentication login service and groupware (mi-global) over a two-day period starting on the 4th.
The incident exposed the account numbers of around 3,800 customers. However, no other sensitive information, such as account holders’ names, appears to have been leaked.
Personal information belonging to executives and employees was also leaked on a large scale. Information on a total of 35,255 people, including former employees and outsourced workers, was confirmed to have been exposed.
The leaked data included names, employee ID numbers, email addresses, mobile phone numbers and encrypted passwords. Unique identification information and sensitive information—including resident registration numbers, passport numbers, driver’s license numbers and foreigner registration numbers—were not among the data leaked.
Mirae Asset Securities said it blocked the relevant access route and activated its emergency response system immediately after detecting signs of abnormal access through an external IP address. It also reported the incident to relevant authorities, including the Financial Services Commission, the Financial Supervisory Service and the Personal Information Protection Commission, in accordance with applicable laws.
The company said the incident involved data being viewed from outside without proper access authorization and did not lead to a malware infection or service disruption. No financial losses have been identified so far, and major systems and services, including the website, are operating normally.
In a notice issued under the names of CEOs Kim Mi-seob and Heo Sun-ho, Mirae Asset Securities said, “We once again deeply apologize for failing to fulfill our responsibility to protect your valuable personal (credit) information,” adding, “We are closely investigating the cause of the incident and how the information was leaked, and are preparing measures to prevent a recurrence.”

[email protected] Kim Ye-ji Reporter