ENKR

Mirae Asset Securities customer account number and staff data breach

Add to my breach check

Made public

What leaked6

Replaceable

  • Password

Hard to replace

  • Bank account number
  • Mobile number
  • Email address
  • Other profile data

Permanent

  • Full name
  • Passwordsome staff; stored encrypted, method not stated
  • Bank account numbercustomers' securities account numbers; the company says account holder names did not leak
  • Mobile numbersome staff
  • Email addresssome staff
  • Full namestaff
  • Other profile datastaff employee numbers

To-dos6 · about 1 h 30 min in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Use an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover

What happened next7 events

  1. UndetectedNone on record
  2. Response 7 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 7 events

Back to latest
  1. By November 8, 2026, cut outside connections of the groupware and its mobile service while checking for flaws · press
  2. No financial loss found · press
  3. Ran a temporary help desk for affected customers from 10:00 to 17:00 KST · press
  4. By November 7, 2026, reported to the FSC, the FSS and the PIPC · press
  5. By November 7, 2026, blocked the access path after finding abnormal access from an outside IP · press
  6. The chief executives apologised in the notice · press
  7. Homepage notice: attacks on 4 and 5 November leaked customer account numbers and staff data · press
Company
Mirae Asset Securities
When it happened
–
Made public
Notice
Leak confirmed
Affected
unknown; 35,255 current and former staff and contractors in the mi-global groupware (5 November) and account numbers of about 3,800 customers through the mobile web login (4 November) · company notice as reported by the press

Sources