Now Hacked
EN
Data breach

Mirae Asset Securities breach affects about 3,800 customers and 35,255 personnel

First reported · Last reported · 119 related reports

Mirae Asset Securities was attacked on November 4 and 5, resulting in the leak of account numbers belonging to about 3,800 customers and personal information belonging to 35,255 employees, former employees, and outsourced staff. The attacks targeted its mobile web login service using mobile phone authentication and its groupware, and the leaked personnel information included names, email addresses, mobile phone numbers, and encrypted passwords. The Financial Supervisory Service (FSS) launched an on-site inspection and confirmed links among multiple attacks.

Key facts

Affected organization
Mirae Asset Securities
Incident type
Data breach
Occurred / detected
2026-11-04
Scale of damage
Account numbers of about 3,800 customers and personal information of 35,255 employees, former employees, and outsourced staff
Cause / method
External attacks on the mobile web login service using mobile phone authentication and on groupware
Location
South Korea

If your data was exposed

View Mirae Asset Securities notice ↗

Exposed dataNamePhone numberEmailPasswordBank account

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  3. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.

Timeline

  1. The mobile web login service using mobile phone authentication was attacked, leaking account numbers belonging to about 3,800 customers.
  2. The groupware was attacked, leaking personal information belonging to 35,255 employees, former employees, and outsourced staff.
  3. The Financial Supervisory Service’s launch of an on-site inspection and confirmation of links among multiple cyberattacks became public.

119 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.