Mirae Asset Securities Hit by Hack: 3,800 Clients Affected

What was exposed

For customers, the leaked data consists of account numbers of about 3,800 people. For staff, the information covers 35,255 employees, including names and employee ID numbers. Email addresses, mobile phone numbers and encrypted passwords were also leaked, but only for some individuals.

The company says unique identifiers and sensitive data were not affected. That includes resident registration numbers, passport numbers, driver's license numbers and foreigner registration numbers.

Response and reporting

Mirae Asset says it detected abnormal access from an external IP address, blocked the access route and activated its emergency response system. It has reported the intrusion and the leak of personal credit information to the Financial Services Commission, the Financial Supervisory Service and the Personal Information Protection Commission.

A company representative described the incident as a case in which an outside party viewed data without proper authorization. The representative said there was no malware infection and no service outage.

The breach adds to a run of hacking incidents in the South Korean financial sector. With regulators now notified, the case is likely to draw scrutiny of how the firm protects customer and employee data, particularly around authentication systems and internal tools.