Regulators cite data breaches at Bithumb, Daishin Securities, Mirae Asset Global Investments

Bithumb, Daishin Securities, and Mirae Asset Global Investments all announced hacking events on that same day, as conveyed by Yonhap News Agency.

Daishin Securities provided a more definitive and concerning set of figures, confirming that approximately 38,490 patrons were subjected to unauthorized access detected on October 17. The compromised information encompassed a broad spectrum, including names, mobile phone numbers, physical addresses, email addresses, and bank account numbers. The brokerage firm has informed those customers affected and is implementing emergency protocols to mitigate further harm.

Bithumb stated that its internal mobile system had been infiltrated, resulting in the leakage of personal details. However, the exchange maintains that the assets held in cryptocurrency were not impacted by the breach. According to the exchange, the intrusion targeted an internal mobile groupware system used by staff, which functions as the office infrastructure—handling scheduling, messaging, and internal documentation—rather than the mechanism facilitating buy and sell orders. Bithumb asserted that this system maintains a physical separation from its trading operations, thereby insulating virtual assets from danger. Nevertheless, personal data resided within that compromised internal area. The company is currently examining the full extent of the incident, specifically inquiring if any customer data was exposed. Upon becoming aware of the breach, the exchange promptly notified both the Personal Information Protection Commission and the Korea Internet & Security Agency.

Mirae Asset Global Investments disclosed a hacking incident that affected certain parts of its business systems. Citing the Financial Supervisory Service, reports indicated that the risk to client data was low and that no substantial financial losses occurred. Compared to the other two firms, Mirae's announcement was the least severe, as the firm stated that no widespread customer data had been compromised.

These disclosures on Wednesday did not occur in isolation; earlier in October, a minimum of 16 South Korean financial institutions experienced cyberattacks. These prior incidents have been linked to an estimated 100,000 reported instances of data leakage. When adding Daishin's figure of roughly 38,490 affected customers, the total count of exposed records across the industry continues to rise.

Separately, the Science Ministry in Seoul, alongside the Korea Internet & Security Agency, issued a directive urging website operators to verify their systems for vulnerabilities associated with PHP. Research findings suggest that exploits targeting PHP, a widely utilized programming language powering a significant portion of websites, were leveraged in these attacks. The Financial Supervisory Service has intensified its oversight and inspections of financial corporations, pressing them to rectify weaknesses. Furthermore, the regulator emphasized the necessity of bolstering IT security measures as cyber threats advance, potentially being driven by artificial intelligence.

For the clientele of Bithumb, the immediate concern centers on the security of their digital assets. The exchange affirms their safety, citing the segregation between its employee systems and its trading platforms. The unresolved issue remains the personal information; users cannot know if their private details were part of the leak until Bithumb concludes its internal review. Future developments warrant close observation, specifically the findings of Bithumb's internal probe and whether customer data is implicated. Additionally, market participants should monitor whether the advisories regarding PHP from the Science Ministry and the Korea Internet & Security Agency will curb the frequency of attacks, or if more disclosures will surface before the end of the month.

These events underscore the necessity for heightened cybersecurity protocols within the financial sector in South Korea to safeguard sensitive information. The regulatory bodies and financial institutions are actively responding to these security challenges, which reflect a broader trend of escalating cyber threats demanding stricter operational safeguards from market participants.

Why it matters

These disclosures highlight significant vulnerabilities across South Korea's financial sector, prompting increased regulatory scrutiny from the Financial Supervisory Service. Readers should watch the outcome of Bithumb's investigation to determine if customer personal information was compromised. The focus on PHP flaws suggests a systemic issue in how these firms manage their IT infrastructure.