South Korean Financial Firms Report New Cybersecurity Incidents
South Korea’s financial sector has reported a fresh set of cybersecurity incidents involving Daishin Securities, Mirae Asset Global Investments and cryptocurrency exchange Bithumb. Daishin said an attack exposed personal information belonging to 38,490 customers, including names, email addresses and mobile phone numbers.
The brokerage said it had notified affected customers, was cooperating with authorities and would compensate losses where required by law. Mirae Asset Global Investments and Bithumb separately reported incidents on Wednesday, but neither company confirmed that customer information had been taken.
New incidents follow an earlier campaign
The disclosures come roughly a month after another series of attacks against South Korean financial institutions. Security researchers linked the September activity to a suspected China-based hacker who used Artex, an AI penetration-testing tool. Officials are still investigating the root cause of the latest breaches, and no connection between the September campaign and the new incidents has been established.
The sequence broadens concern beyond the country’s banking systems. The affected organisations span securities trading, asset management and a crypto exchange, showing that different parts of the financial-services ecosystem are reporting security events.
Regulator calls for stronger safeguards
South Korea’s Financial Services Commission has called for stronger cybersecurity measures after attacks on financial companies and government agencies. The country also plans security checks on dozens of IT systems in the private sector.
The South Korean cases occurred as Japan reported a cybersecurity incident involving GMO Internet following attacks on Japanese financial institutions. Investigators have not established a link between the incidents in the two countries, but the events underline the cybersecurity challenges facing financial organisations across Asia.
What financial firms should take from the disclosures
For businesses handling customer and transaction data, the disclosures reinforce the operational importance of detecting incidents, establishing the scope of potentially exposed information, notifying affected customers and cooperating with regulators. Daishin’s reported response illustrates the immediate steps institutions may need to take while a technical investigation remains under way.
The planned private-sector system checks also make cyber resilience a business issue for organisations beyond the firms that have disclosed incidents. Financial services leaders should ensure their response processes can support investigations, customer communications and any obligations that follow an attack.