Mirae Asset Securities confirms customer account numbers and workforce data leaked

On November 7, Mirae Asset Securities disclosed intrusions affecting two services on consecutive days. Its customer notice says an external party accessed the mobile website’s phone-verification login flow on November 4. About 3,800 customers’ brokerage account numbers leaked. The broker says account-holder names and other customer fields were outside that exposure. It suspended the login service after discovering the leak and kept it disconnected from external access while investigating.

The November 5 attack affected the broker’s mi-global groupware. The workforce notice counts about 35,255 people, including former employees and contractors. The exposed data consisted mainly of names and employee IDs, with email addresses, mobile numbers and passwords described as encrypted exposed for some people. The fields vary by person. The notice gives no password protection scheme or evidence that the exposed passwords were recovered in usable form. The broker disconnected the affected server, kept groupware and related mobile services isolated from external access, and expanded checks to other internet-accessible internal systems.

The two notices count different groups, and the company does not give a deduplicated total. They provide no technical entry mechanism, shared-attacker attribution, confirmed financial losses or reopening time for the affected login and groupware services.