Now Hacked
EN-GB
Data breach

Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel

First reported · Last reported · 119 related reports

Mirae Asset Securities suffered attacks on 4 and 5 November, exposing account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, with the leaked personnel information including names, email addresses, mobile phone numbers and encrypted passwords. The Financial Supervisory Service (FSS) began an on-site inspection and confirmed connections between several attacks.

Key facts

Affected organisation
Mirae Asset Securities
Incident type
Data breach
Occurred / detected
2026-11-04
Scale of damage
Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees and outsourced staff
Cause / method
External attacks on the mobile web login service using mobile phone authentication and on groupware
Location
South Korea

If your data was exposed

View Mirae Asset Securities notice ↗

Exposed dataNamePhone numberEmailPasswordBank account

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  3. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.

Timeline

  1. The mobile web login service using mobile phone authentication was attacked, exposing account numbers belonging to about 3,800 customers.
  2. The groupware was attacked, exposing personal information belonging to 35,255 employees, former employees and outsourced staff.
  3. The Financial Supervisory Service’s launch of an on-site inspection and confirmation of links between several cyber-attacks became public.

119 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.