Daishin Securities said on October 28 that personal and credit data of more than 38,000 customers had leaked. It detected abnormal access on October 17 to a server for online account opening for its discretionary investment service, blocked the IPs and took emergency action. A review of about ten days with the Financial Security Institute confirmed the scope.
Eight items leaked: names, emails, addresses, telecom IDs, bank names, and encrypted bank account, Daishin account and mobile numbers. Mirae Asset Global Investments also blocked abnormal outside access to some web systems that day; no personal credit data leak or financial loss was confirmed. Bithumb's internal mobile work system exposed staff data; member data remains under investigation.
The Financial Supervisory Service sent teams to Daishin and Bithumb; police opened a preliminary inquiry. Since October 21, regulators logged about 4.4 million accesses from North Korean IP ranges targeting Korean financial firms, mostly scans for gaps. None was confirmed to have caused a breach.
IPs alone do not identify attackers.
Check Daishin's official app and notices. For calls or texts offering compensation or an account check, contact the official customer centre directly. Do not follow text links or share passwords or verification codes.
Photo: Whiteyan02, Wikimedia Commons (CC BY-SA 4.0, cropped)
