[DigitalToday reporter Sang-yeop Oh] Daishin Securities confirmed that the personal (credit) information of 38,490 customers was leaked. Daishin Securities said no signs of secondary damage have been found so far and it is working on measures to protect affected customers and prevent a recurrence.

Daishin Securities said on Oct. 28 that an internal investigation found data on a total of 38,490 people had been leaked.

The incident was confirmed after signs of abnormal access by a hacker were detected on Oct. 17 on a linked server for non-face-to-face securities account opening for discretionary investment management.

Daishin Securities said it blocked the IP address used in the attack and IP addresses used for bypass access immediately after detecting the abnormal access, and reported the matter to regulators. It then conducted a detailed investigation with the Financial Security Institute into whether personal (credit) information had been leaked and the scope of the breach.

After reviewing about 60,000 signals over 10 days that were disguised as normal service, it confirmed on Oct. 26 that a total of 8 items were included in the leaked data: customer names, email addresses, addresses, telecommunications IDs, bank names, deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers and mobile phone numbers.

Deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers and mobile phone numbers were found to have been leaked in encrypted form.

Daishin Securities explained that no signs of secondary damage to customers have been found so far as a result of the leak, and that no illegal access by the hacker to core business systems occurred.

Daishin Securities plans to individually notify customers affected by the leak of the items involved and respond quickly if actual damage is confirmed.

To prevent a recurrence, it will strengthen access controls for the server where the incident occurred and improve its system to detect and block abnormal signs. It will also expand checks for security vulnerabilities in external linked systems.

If customers incur losses due to the personal data leak, it plans to provide compensation in accordance with relevant laws and procedures.

Daishin Securities CEO Seung-wook Jin (진승욱) said, "We take this information leak seriously and we deeply apologise to our customers," adding, "We will responsibly implement the measures needed to protect customers and prevent a recurrence."