Mirae Asset Securities said on Saturday that outside attackers accessed its mobile web phone authentication login service and its groupware system on November 4 and 5, leaking the account numbers of about 3,800 customers, though not account holder names, and personal information for 35,255 employees including retirees and outsourced staff, covering names, employee numbers, email addresses, mobile phone numbers and encrypted passwords, but not resident registration numbers or other unique identification numbers.
The company said there was no malware infection and no service interruption, that no financial damage has been confirmed so far, and that it blocked the access route and reported the incident to the Financial Services Commission, the Financial Supervisory Service and the Personal Information Protection Commission. In a notice issued in the names of chief executives Kim Mi-seop and Heo Seon-ho, the company apologised for failing to protect customers’ information and said it was identifying the cause and preparing measures to prevent a recurrence.