ENKR

Mirae Asset Securities customer account number and staff data breach

Add to my breach check

Made public

What leaked6

Replaceable

  • Password

Hard to replace

  • Bank account number
  • Mobile number
  • Email address
  • Other profile data

Permanent

  • Full name
  • Passwordsome staff; stored encrypted, method not stated
  • Bank account numbercustomers' securities account numbers; the company says account holder names did not leak
  • Mobile numbersome staff
  • Email addresssome staff
  • Full namestaff
  • Other profile datastaff employee numbers

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover

What happened next7 events

  1. UndetectedNone on record
  2. Response 7 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. By November 8, 2026, cut outside connections of the groupware and its mobile service while checking for flaws · press
  2. No financial loss found · press
  3. Ran a temporary help desk for affected customers from 10:00 to 17:00 KST · press
  4. By November 7, 2026, reported to the FSC, the FSS and the PIPC · press
  5. By November 7, 2026, blocked the access path after finding abnormal access from an outside IP · press
  6. The chief executives apologised in the notice · press
  7. Homepage notice: attacks on 4 and 5 November leaked customer account numbers and staff data · press
Company
Mirae Asset Securities
When it happened
–
Made public
Notice
Leak confirmed
Affected
unknown; 35,255 current and former staff and contractors in the mi-global groupware (5 November) and account numbers of about 3,800 customers through the mobile web login (4 November) · company notice as reported by the press

Sources