Now Hacked
EN
Data breach

Hanyang Securities groupware hack exposes 31 personal information records

First reported · Last reported · 43 related reports

An external groupware platform used by Hanyang Securities was hacked, exposing 31 records in total: 15 containing customer information, two containing employee-related information, and 14 containing general personal information. The exposed information included names, resident registration numbers, driver's license numbers, and bank account numbers, with resident registration numbers exposed in three records. Hanyang Securities said an insufficient access control vulnerability in Daou Office was the direct cause and that the breach occurred before a patch was released. It is now considering building its own business system.

Key facts

Affected organization
Hanyang Securities
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
31 personal information records involving customers, employees, and others, including three records exposing resident registration numbers
Cause / method
A zero-day attack exploiting an insufficient access control vulnerability in the external groupware platform Daou Office
Location
South Korea

If your data was exposed

Exposed dataNameNational ID numberBank account

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  3. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. The groupware hack at Hanyang Securities and the exposure of 31 personal information records involving customers, employees, and others were disclosed.
  2. Hanyang Securities said an insufficient access control vulnerability in Daou Office was the direct cause and that the breach occurred before a patch was released.
  3. It was disclosed that Hanyang Securities was considering building its own business system.

43 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.