South Korea’s financial sector is confronting another series of cyberattacks, with reported incidents involving brokerages Daishin Securities and Mirae Asset Global Investments, as well as crypto exchange Bithumb. The latest disclosures put customer information and the security of financial firms’ systems in focus, while the cause of the breaches remains under investigation.
Daishin reports exposed customer information
Daishin Securities said a cyberattack exposed personal information belonging to 38,490 customers. The affected information included names, email addresses, and mobile phone numbers.
The company has notified customers whose information was affected and is cooperating with authorities investigating the incident. Daishin also said it will compensate for any losses as required by law. Those steps address the reported exposure, but the investigation is still needed to establish how the attack happened and what further effects it may have.
The reported information is personal and contact-based. The source does not say that financial account details were exposed, so the scope described so far is limited to names, email addresses, and mobile phone numbers. Customers have been notified, according to the report.
Other firms report separate incidents
Mirae Asset Global Investments and Bithumb reported separate cybersecurity incidents on Wednesday, according to local media. Neither firm has confirmed that customer data was taken. The available information therefore distinguishes their incidents from Daishin’s: data exposure has been reported at Daishin, while the status of customer information at Mirae and Bithumb remains unconfirmed.
South Korea’s financial regulator has called for stronger cybersecurity measures after a string of attacks on financial firms and government agencies. Officials in Seoul said on Wednesday that the country also plans security checks on dozens of private-sector IT systems. Such checks would extend attention beyond individual financial companies to technology systems used across the private sector.
The firms and the Financial Services Commission did not immediately respond to requests for comment. That means the public account of the incidents remains limited to the information reported so far, and investigators have not established the root cause of the latest breaches.
Earlier attacks raise questions about risk
The latest incidents follow a series of cyberattacks on South Korean financial institutions roughly a month earlier. Security researchers linked that September wave to a suspected China-based hacker who relied on an AI penetration testing tool called Artex. Officials are still investigating the latest breaches, however, and the earlier attribution does not establish who was responsible for these new incidents.
The distinction matters: the earlier attacks and the current reports form a continuing concern for South Korea’s financial sector, but the source does not establish that they share a perpetrator or method. It also does not say that AI was used in the latest incidents. The reported connection between AI-enabled hacking and the September attacks is one reason the broader issue has drawn attention, rather than a confirmed explanation for the current breaches.
Recent reports from elsewhere in Asia add regional context. Japan reported a cybersecurity incident involving GMO Internet yesterday, after a series of attacks on its financial institutions. Investigators have not established a connection between the incidents in Japan and those affecting South Korean firms.
What is known, and what remains open
The reported facts point to several distinct questions: what systems were accessed, whether more customer information was affected, and what caused each incident. In Daishin’s case, the company has described the exposed information and notified affected customers. For Mirae and Bithumb, whether customer data was taken has not been confirmed. The root cause of the latest breaches also remains under investigation.
For regulators, the announced security checks and call for stronger protections signal that the response extends beyond the firms already named. For customers, the practical point is that a reported exposure of names and contact details is different from confirmation that financial information was stolen. The source does not report such a confirmation.
Across the region, the incidents underscore cybersecurity challenges facing financial institutions and government agencies. The source points to years of weak cybersecurity as a factor in the broader challenges, while making clear that investigators have not linked the reported attacks. Until investigations clarify the causes and scope, the firms’ disclosures and the planned checks are the main information available about how South Korea is responding.