Hacking incidents are occurring in the financial investment industry. After Daishin Securities suffered a leak of personal information for about 38,000 customers, unauthorized external access to systems was also confirmed at Bithumb and Mirae Asset Global Investments.
On Oct. 28, the financial investment industry said Mirae Asset Global Investments was hit by an external hacking attack and is checking the scope of damage and the specific circumstances of the breach.
A Mirae Asset Global Investments official said, "It appears there was external access," adding, "We believe it is related to some internal systems, and we are checking the exact details."
So far, specific damage such as the actual scope of intrusion and whether customer or employee information was leaked has not been confirmed. The company is investigating the external access route and the systems affected.
A personal data leak also recently occurred at Mirae Asset Life, an affiliate of the same Mirae Asset Group. Mirae Asset Life confirmed the leak of customer information on Oct. 26, and the Financial Supervisory Service launched an on-site inspection to review the details of the incident and the response system.
In the securities industry, Daishin Securities disclosed a customer information leak.
Daishin Securities said on Oct. 28 that an internal investigation found personal credit information for 38,490 individuals had been leaked.
The incident was confirmed after signs of abnormal access by a hacker were detected on Oct. 17 on a linked server used for non-face-to-face securities account openings for discretionary investment management. Daishin Securities blocked the IP address used in the attack and an IP used for bypass access, reported the case to financial authorities and investigated the scope of the breach with the Financial Security Institute.
A full review of about 60,000 signals disguised as normal services over about 10 days found that eight items were leaked, including customer names, email addresses, home addresses, communications IDs, bank names, deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers and mobile phone numbers.
Deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers and mobile phone numbers were encrypted. Daishin Securities explained that it has not confirmed any secondary damage to customers or signs of illegal access to its core business systems so far.
A hacking incident also occurred at digital asset exchange Bithumb, targeting its internal mobile system.
Bithumb confirmed on Oct. 27 that personal information was leaked due to abnormal access by an unauthorized external party to its internal mobile groupware system. The system is used for employees to use internal work functions through mobile phones.
So far, information related mainly to employees appears to have been leaked. Bithumb said it cannot rule out the possibility that member information was also included and is analyzing the exact scope and scale of the leak.
Bithumb reported the incident to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission after becoming aware of it. It is also investigating the attacker and the specific method of intrusion.
An industry official said, "I have heard that attacks have also come in on other financial firms," adding there is a possibility additional damage could be confirmed.