Science & Tech · Cybersecurity · 1 min ago
Mirae Asset Securities says hack exposed data of more than 39,000 people
Mirae Asset Securities said hackers accessed its systems in attacks on Nov.
4 and 5.
The South Korean brokerage said about 3,800 customers' account numbers were exposed, but account holders' names and other sensitive customer details were not.
Personal data for 35,255 employees also leaked, including names, work numbers, email addresses, phone numbers and encrypted passwords.
The incidents are part of a wider run of cyberattacks affecting South Korea's financial industry, and three other Mirae Asset group companies had also faced attacks or attempted intrusions.
The company has found no financial losses so far and said its main systems and services are operating normally.
It blocked the access routes and is investigating, while warning customers to watch for fake calls, texts and emails that could use leaked information.
Mirae Asset Securities said a cyberattack exposed data belonging to more than 39,000 people.
About 3,800 customers’ account numbers were exposed, but the company said account-holder names and other related information were not.
Personal information belonging to 35,255 current and former employees, including retirees and contractors, was also exposed.
The company said there was no malware infection, service disruption or confirmed financial loss.
It said it blocked the access routes, reported the incident to authorities and was notifying affected people.
- Who
- Mirae Asset Securities and about 3,800 customers, along with 35,255 current and former employees.
- What
- External attacks exposed customers’ account numbers and employees’ personal information.
- When
- The attacks occurred on November 4 and 5, 2026. The company disclosed them on November 7.
- Where
- Mirae Asset Securities’ mobile web phone-authentication login service and groupware.
- Why
- The company said outsiders accessed data without authorization. The attackers’ motive is not stated.
This story does not have two clearly opposing sides.
The company detected abnormal external access to its mobile web phone-authentication login service.
The company detected signs of an external attack on its groupware.
The company disclosed the incident and said it had reported it to the relevant authorities.
The company planned to operate a temporary consultation service for affected customers.
- Customers affected
- About 3,800
- Employees affected
- 35,255 current and former employees, including retirees and contractors
- Customer data exposed
- Account numbers
- Employee data exposed
- Names, employee numbers, email addresses, mobile phone numbers and encrypted passwords
- Attack dates
- November 4 and 5, 2026
- Confirmed financial loss
- None so far, according to the company
8 sources
What people are saying
We take seriously the concern caused by the leak of information used in financial transactions, and deeply apologize for the exposure of personal credit information.
We immediately blocked the relevant access routes and activated our emergency response system after detecting signs of abnormal access from an external IP, and reported the incident to the Financial Services Commission, the Financial Supervisory Service and the Personal Information Protection Commission in accordance with relevant laws.
This was a case of data being viewed externally without proper authorization; there was no malware infection or service disruption.