Now Hacked
EN-GB
Data breach

Mirae Asset Life Insurance cyber-attack exposes customer, retirement pension and employee data

First reported · Last reported · 38 related reports

A leak of customers' personal information following a cyber-attack at Mirae Asset Life Insurance was confirmed on 26 October. In addition to names, resident registration numbers and bank account numbers, retirement pension transaction data and employee information were also confirmed to have been exposed. The company undertook emergency response and recovery work, while the closure of its website disrupted access to some online services. The Financial Supervisory Service extended its on-site inspection as the scope of the damage changed.

Key facts

Affected organisation
Mirae Asset Life Insurance
Incident type
Data breach
Occurred / detected
2026-10-26
Scale of damage
Customers' personal information, retirement pension transaction data and employee information
Cause / method
A web shell upload vulnerability was identified as a suspected cause, but the final cause has not been established
Location
South Korea

If your data was exposed

View Mirae Asset Life Insurance notice ↗

Exposed dataNameNational ID numberBank accountID document copyUsage & purchase history

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  3. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.

Timeline

  1. A customer data leak caused by a cyber-attack was confirmed, and the company activated a company-wide emergency response and blocked access to its website.
  2. Customers were notified that names, resident registration numbers, connecting information (CI), bank account numbers and other data had been exposed, while the website closure disrupted access to some online services.
  3. A web shell upload vulnerability was identified as a suspected cause, and the company said it was investigating the cause and undertaking recovery work.
  4. Additional leaks of retirement pension transaction data and employee information were confirmed, prompting the Financial Supervisory Service to extend its on-site inspection.
  5. The company strengthened customer data protection and considered additional measures.

38 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.