Mirae Asset Securities has reported a data breach involving the leak of information for over 39,000 individuals, including customers and employees, due to an external hacking attack. This incident comes amid a series of cyberattacks targeting the financial sector, with four subsidiaries of Mirae Asset Group now affected.
According to Mirae Asset Securities, abnormal external access occurred on their mobile web authentication login service and internal groupware, 'mi-global,' on November 4 and 5.
The breach exposed personal information of 35,255 employees, including former employees and contractors. The leaked data includes names, employee numbers, email addresses, mobile phone numbers, and encrypted passwords. However, sensitive information such as resident registration numbers, passport numbers, driver's license numbers, and foreign registration numbers were not compromised.
Customer data was also partially leaked, affecting over 3,800 individuals whose account numbers at Mirae Asset Securities were exposed. It has been confirmed that other sensitive information, including account holder names, was not leaked.
Prior to this incident, on October 26, customer personal information from Mirae Asset Life was leaked, followed by external intrusion attempts at Mirae Asset Asset Management on October 28 and Energy Infrastructure Asset Management on November 2. With the latest breach at Mirae Asset Securities, a total of four subsidiaries within the group have been targeted by cyberattacks.
Earlier, Daishin Securities and Hanyang Securities also confirmed data breaches due to hacking. There are concerns that artificial intelligence (AI) agents may have been utilized in these recent cyberattacks on the financial sector.
Upon detecting the unusual access, Mirae Asset Securities immediately blocked the relevant pathways and activated its emergency response system. The company reported the incident to the Financial Services Commission, the Financial Supervisory Service, and the Personal Information Protection Commission.
The company stated that the incident involved unauthorized access to internal data from outside sources. There was no malware infection or system failure, and no financial damage has been confirmed to date. Major services, including the company’s website, are operating normally.
However, the company has warned of potential secondary damage from the leaked information. Mirae Asset Securities advised customers to be cautious of phishing and smishing attempts through phone calls, text messages, or emails impersonating the company.
A temporary consultation center for affected customers will be operating from 10 AM to 5 PM today.
In a notice signed by CEOs Kim Mi-seob and Heo Seon-ho, Mirae Asset Securities expressed deep apologies for failing to protect customers' valuable personal and credit information, stating, "We are closely investigating the cause of the incident and the circumstances of the leak to implement measures to prevent recurrence."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.