Website of South Korea's government fund investment pool lead manager breached by sequential ID queries; user and staff data taken

SBS reports that the business website of Mirae Asset Global Investments, lead manager of about 38 trillion won of the roughly 88 trillion won public fund investment pool, was hacked last month ^[1]. Hackers used a basic technique of repeatedly querying by changing member numbers one by one, taking IDs, names and emails of 331 users plus market and training materials and last year's daily returns of fully delegated funds, while personal data of 2,281 staff leaked from internal systems ^[1]. The government and company say the site is informational and fund management is unaffected, and the company had reported all 12 items clean in a self-assessment for the FSS two weeks before the hack ^[1].

Industries mainly affected: Finance, Government

The government and company say the site is informational and fund management is unaffected, and the company had reported all 12 items clean in a self-assessment for the FSS two weeks before the hack ^[1]