Mirae Asset Securities data breach leaks info of 39,000 customers and staff
Synopsis
South Korea's top brokerage Mirae Asset Securities has confirmed a breach exposing data of 39,000 people — but that's just one piece of a larger crisis. Over 470,000 financial-sector records have leaked from 37 firms in a single month, regulators say, as a parallel North Korean-attributed Binance hack worth US$6 billion underscores just how exposed the region's financial infrastructure has become.
Key Takeaways
Mirae Asset Securities confirmed a data breach on 8 November 2026 affecting approximately 39,000 customers and employees.
Account numbers of 3,800 customers and personal data of over 35,000 current and former staff were exposed.
South Korea's Financial Services Commission reports more than 470,000 records leaked from 37 financial firms over the past month, with an estimated 1 billion won (US$745,000) stolen.
A total of 40 breach incidents have been logged since 30 September , spanning banks, insurers, and investment firms.
Binance separately disclosed a US$6 billion cryptocurrency theft attributed by the FBI to North Korean group TraderTraitor .
Mirae Asset Securities Co., South Korea's leading brokerage house, confirmed on 8 November 2026 that personal information belonging to approximately 39,000 customers and employees had been leaked following unauthorised external access to its systems. The breach, which occurred across Wednesday and Thursday, targeted both a mobile web phone authentication login service and an internal system, the company said.
What Was Leaked
According to the company, account numbers of roughly 3,800 customers were exposed, along with the personal data of more than 35,000 current and former employees and contractors. The non-customer corporate data compromised in the breach included names, employee ID numbers, email addresses, mobile phone numbers, and passwords.
Company Response
Mirae Asset Securities said it detected suspicious activity originating from external IP addresses and immediately blocked the affected access routes, simultaneously activating its emergency response system. The firm has since reported the incident to three regulators: the Financial Services Commission (FSC), the Financial Supervisory Service (FSS), and the Personal Information Protection Commission.
A Pattern Across the Financial Sector
The breach is not an isolated incident. It followed similar data leaks reported by sister companies including Mirae Asset Life Insurance. According to the Financial Services Commission, more than 470,000 personal data records have been leaked from 37 companies across South Korea's financial sector over the past month alone, with funds stolen estimated at 1 billion won (approximately US$745,000). Since 30 September, when the first data leak was detected, a total of 40 separate incidents have been reported at 37 companies — including four commercial banks, five financial investment firms, three insurance companies, and five savings banks.
Broader Cyber Threat: Binance and North Korea
The disclosures come amid a wider wave of financial cybercrime. Binance, the world's largest cryptocurrency exchange, separately revealed that hackers exploited fake job interviews and an internal artificial intelligence tool in a cyberattack that resulted in the theft of more than US$6 billion in digital assets last week. The US Federal Bureau of Investigation (FBI) has attributed the attack to a North Korean hacking group it identifies as TraderTraitor, a name previously linked to multiple cryptocurrency heists.
What Happens Next
Regulators are expected to scrutinise the security practices of South Korea's financial institutions more closely in the wake of the serial breaches. For affected customers and employees of Mirae Asset Securities, the exposure of passwords and mobile numbers raises the risk of credential-stuffing and phishing attacks, making immediate password changes advisable. The scale and frequency of these incidents signal a systemic vulnerability in the sector's digital infrastructure that authorities will be under pressure to address.
Point of View
Pointing to a systemic failure rather than a one-off lapse. South Korean regulators have mandated reporting, but reporting after the fact does not protect the 470,000 people whose data is already in circulation. The convergence of a domestic financial-sector breach wave and a North Korean-attributed US$6 billion crypto heist in the same week should force a rethink of how digital authentication and privileged access are managed across the region's financial institutions. Reactive emergency response systems are not enough when the attack surface keeps expanding.
NationPress
8 Nov 2026
Frequently Asked Questions
What happened in the Mirae Asset Securities data breach?
Mirae Asset Securities confirmed that unauthorised external access on Wednesday and Thursday exposed the account numbers of approximately 3,800 customers and the personal data — including names, employee IDs, email addresses, mobile numbers, and passwords — of over 35,000 current and former employees and contractors, bringing the total affected to around 39,000 individuals.
What data was stolen from Mirae Asset Securities?
Customer account numbers and employee personal data were stolen. The employee data included names, employee ID numbers, email addresses, mobile phone numbers, and passwords — raising immediate risks of phishing and credential-stuffing attacks against those affected.
How large is the broader South Korean financial-sector data breach crisis?
According to the Financial Services Commission, over 470,000 personal data records have been leaked from 37 companies in South Korea's financial sector in the past month, with 40 separate incidents reported since 30 September. Victims span four commercial banks, five financial investment firms, three insurance companies, and five savings banks.
What is the connection to the Binance hack and North Korea?
Separately, Binance revealed that hackers used fake job interviews and an internal AI tool to steal more than US$6 billion in digital assets last week. The US FBI attributed the attack to a North Korean group called TraderTraitor, which has been linked to previous cryptocurrency thefts — highlighting the scale of state-sponsored cyber threats targeting financial infrastructure.
What should Mirae Asset Securities customers and employees do now?
Affected individuals should change passwords immediately, particularly if the same credentials are used on other platforms, and remain vigilant against phishing or social-engineering attempts that may exploit the leaked mobile numbers and email addresses. Mirae Asset Securities said it has blocked the affected access routes and activated its emergency response system.
