South Korea's Mirae Asset Securities Breached; Approximately 3,800 Customer Account Numbers and 35,000 Employee Records Leaked

What Happened

In its notice regarding the employee data breach, Mirae Asset Securities stated that its groupware system mi-global suffered an external attack on November 5, confirming the leakage of personal data belonging to approximately 35,255 employees ^[1].

According to Yonhap News Agency, the company stated that unauthorized external access targeted its mobile web phone-authentication login service and internal systems on November 4 and November 5, respectively ^[2].

Scope of Impact

The leaked employee data primarily consists of names and employee ID numbers, with some records also including email addresses, mobile phone numbers, and encrypted passwords ^[1]. On the customer side, account numbers for approximately 3,800 individuals were exposed ^[2].

Response and Remediation

The company disconnected the affected servers from the network, suspended external connectivity for the groupware and related mobile services, and expanded security inspections across externally accessible internal systems ^[1]. The company stated that it has reported the incident to the Financial Services Commission, the Financial Supervisory Service, and the Personal Information Protection Commission ^[2].