Breaches and incidents
Daishin Securities: account-opening linked server breached, 38,490 customers’ data leaked
Daishin Securities said personal and credit information of 38,490 customers leaked, covering eight items.
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Daishin Securities said personal and credit information of 38,490 customers leaked, covering eight items: name, email, address, communication ID, bank name, and encrypted deposit/withdrawal account numbers, integrated account numbers and mobile numbers (SBS Biz).
- Root cause: abnormal access to the linked server for non-face-to-face account opening for discretionary investment accounts was detected on 17 Oct; leaked items were confirmed on 26 Oct after reviewing about 60,000 signals disguised as normal service traffic (SBS Biz). The exact method was not disclosed.
- No attacker named; TechCrunch reports officials are still investigating root causes and no link to the September bank attacks has been established. Mirae Asset Global Investments and Bithumb reported separate incidents the same day.
- Daishin blocked the attacker’s IP and a bypass IP, reported to authorities, investigated with the Financial Security Institute, is notifying customers individually and pledged compensation; CEO Jin Seung-wook apologised.