South Korean Financial Firms Report Customer Data Exposure and System Intrusions

South Korea’s latest wave of cyber incidents has put customer information and financial firms’ internal systems under scrutiny. Daishin Securities said data for 38,490 customers was exposed, while Mirae Asset Global Investments and cryptocurrency exchange Bithumb reported unauthorized access to systems. The incidents came amid a broader series of attacks on financial and other companies in Asia.

Customer information exposed at Daishin

Daishin detected suspicious access on Oct. 17 to a server used for remote account openings. Its investigation found that names, email and physical addresses, and encrypted account and mobile phone numbers were among the information exposed. The company said it had found no evidence of subsequent harm to customers or access to its core business systems.

The reported scope matters for customers and for firms assessing the incident: the affected server supported account opening, while Daishin said its core systems were not accessed. Those details describe the company’s findings so far; they do not establish whether exposed information was used after the incident. Daishin’s statement about the absence of evidence of harm likewise reflects what it had identified through its investigation.

Mirae Asset and Bithumb assess access

Mirae Asset said unauthorized access affected some business-use web systems. Retail investor information was not involved, the firm said, because those systems do not serve retail customers. It reported no financial losses and said its main systems and servers were operating normally. Mirae Asset had $461 billion in assets under management at the end of September.

Bithumb detected unauthorized access to an internal mobile groupware system on Tuesday, Yonhap News reported. The exchange was investigating the extent of any data leak, including whether customer information had been exposed. The report did not provide a confirmed count of affected customers or describe the results of that review.

The incidents have different reported scopes: Daishin disclosed specific categories of customer information, Mirae Asset described access to business-use web systems, and Bithumb was still examining possible exposure. For policyholders and financial firms, those distinctions can shape questions about notification, response and business interruption. The available reports do not say whether any cyber insurance claims were filed or how insurers would assess coverage.

Regional incidents raise questions about shared exposure

The South Korean incidents followed attacks in Japan involving SoftBank and Daiwa Securities Group. Japanese authorities called for security checks, scrutiny of third-party risks and added precautions when verifying identities online. South Korea had also experienced a separate attack earlier in the month, when an advanced AI agent targeted some of the country’s largest banks and financial institutions.

That run of incidents is sharpening concern that artificial intelligence may make large-scale hacking easier. The reports do not establish that AI was used in the latest access incidents at Daishin, Mirae Asset or Bithumb. The earlier AI-related attack and the newer disclosures should therefore be treated as separate developments unless investigations establish a connection.

Third-party exposure is another concern for financial organizations. A firm’s online services may rely on outside software and providers, so a weakness in a shared component can affect organizations beyond the company that first identifies it. The article also describes efforts worldwide to address critical PHP flaws, with disruptions prompting banks, airlines and other organizations to take websites offline. It does not identify PHP as the cause of the South Korean incidents.

What customers and firms can watch

Customers affected by a data exposure can look for direct notices from the company and follow any steps it provides. Where account or contact details may have been exposed, they can check account activity and remain alert to unexpected messages that refer to their personal information. The source does not report any confirmed customer losses from the Daishin incident.

For financial firms, the sequence points to practical questions about which systems hold customer information, how remote account-opening services are protected, and what access outside providers or internal tools can reach. A company response should make clear which systems were affected, what data may have been exposed and whether core operations continued. Those details also help insurers and customers distinguish a data incident from a disruption to essential services.

South Korea’s Financial Supervisory Service Governor Lee Chan-jin said some major financial investment companies had suffered widespread hacking the previous day and urged firms to strengthen security. He did not identify those companies. With investigations continuing at Bithumb and the reported incidents spanning distinct systems, the next useful updates will clarify the extent of exposure and whether any customer or business impact emerges.