Mirae Asset Securities Also Hacked... Data of 3,800 Customers and 35,000 Employees Leaked

As external cyberattacks targeting the financial sector continue, Mirae Asset Securities has also suffered a major data breach caused by hacking.

Mirae Asset Securities said on November 7 that external attacks on its mobile web phone-authentication login service and groupware (mi-global) occurred on November 4 and 5.

Yonhap News Agency

The attack exposed the account numbers of more than 3,800 Mirae Asset Securities customers. However, the company said that no other sensitive information directly related to financial transactions, such as account holder names, passwords or balance details, was leaked.

Meanwhile, the attack on the company’s intranet resulted in the large-scale exposure of employee information. Personal information belonging to a total of 35,255 employees, including former employees and outsourced workers, was found to have been leaked. The exposed information included names, employee ID numbers, email addresses, mobile phone numbers and encrypted passwords. The company confirmed that legally defined unique identifiers and sensitive information, such as resident registration numbers, passport numbers, driver’s license numbers and alien registration numbers, were not among the exposed data.

Mirae Asset Securities immediately blocked the access route after detecting access from an abnormal IP address and activated its internal emergency response system. In accordance with relevant laws, it also promptly reported the incident to supervisory authorities, including the Financial Services Commission, the Financial Supervisory Service and the Personal Information Protection Commission.

A Mirae Asset Securities representative said, "This was an intrusion in which someone outside the company accessed system data without proper authorization. There was no malware infection or disruption to IT services." The representative added, "No financial losses to customers have been identified to date, and all major services, including the home trading system (HTS) and mobile trading system (MTS), are operating normally."

In a notice issued under the names of its co-CEOs, Kim Mi-seop and Heo Seon-ho, Mirae Asset Securities said, "We bow our heads and sincerely apologize for failing to fulfill our responsibility to protect our customers’ valuable personal and credit information." The company added, "We will thoroughly investigate the cause of the incident and how the data was exposed, and establish comprehensive measures to prevent a recurrence."

This content was produced with the assistance of AI translation services.