The attackers hit a mobile-web login service that uses phone authentication on Wednesday and the company's in-house groupware, mi-global, on Thursday. Mirae said account holders' names and other customer details did not leak alongside the account numbers.
The leaked employee data covered 35,255 current, former and outsourced staff and included names, employee numbers, email addresses, mobile numbers and encrypted passwords. No resident registration, passport or driver's license numbers were exposed, the company said.
The brokerage is the fourth Mirae Asset Group affiliate struck in less than two weeks. Mirae Asset Life Insurance disclosed a customer data leak on Oct. 26, and intrusions were later detected at Mirae Asset Global Investments and another group asset manager.
Daishin Securities said on Oct. 28 that the personal data of 38,490 customers had leaked in a hack. Gopax, a cryptocurrency exchange, froze trading and withdrawals on Friday after a threatening email from self-proclaimed hackers, and the halt dragged into Saturday.
Mirae Asset Securities urged customers to beware of phone calls, text messages and emails impersonating the company, and opened a temporary help desk from 10 a.m. to 5 p.m. on Saturday.
AJP Takeaways
- Mirae Asset Securities said on Nov. 7, 2026, that hackers had leaked the account numbers of about 3,800 customers and the personal data of 35,255 current, former and outsourced employees.
- The attacks targeted the brokerage's mobile-web phone authentication login service on Nov. 4 and its in-house groupware on Nov. 5, 2026.
- Mirae Asset Securities is the fourth Mirae Asset Group affiliate hit by a cyber intrusion since Oct. 26, 2026, amid a series of hacks across South Korea's financial sector.
Copyright ⓒ Aju Press All rights reserved.
