Daishin Securities Breach Exposes Data of 38,490 Customers

A cyberattack on Daishin Securities exposed the personal information of 38,490 customers, kicking off a fresh wave of breaches that has now hit three more South Korean financial firms in a single month.

Daishin reported the breach to local authorities, disclosing that names, email addresses and mobile phone numbers were compromised, according to local news. The brokerage has notified every affected customer and is cooperating with the investigation. It will compensate for any losses as required by law.

Daishin wasn't alone. On Wednesday, Mirae Asset Global Investments and the crypto exchange Bithumb each reported separate cybersecurity incidents, per local media. Neither company has confirmed that customer data was taken.

That's three financial-sector targets in one week — and they land on top of a September wave of attacks that already rattled the country.

Who is behind the September attacks?

The latest incidents come roughly a month after a series of cyberattacks targeting South Korean financial institutions. Security researchers linked that September wave to a suspected China-based hacker who relied on an AI penetration testing tool called Artex. Officials are still investigating the root cause of the newest breaches and haven't tied them to the same actor.

The pattern matters because it stretches beyond banking. Brokerages and a crypto exchange are now in the blast radius, which raises concerns about vulnerabilities across South Korea's entire financial system — not just its banks.

The takeaway: AI-driven hacking tools like Artex are giving attackers cheaper, faster ways in, and the targets are spreading from banks to brokerages and crypto platforms.

What is the regulator doing about it?

South Korea's financial regulator called for stronger cybersecurity measures on Wednesday, per officials in Seoul. The call follows a string of attacks on financial firms and government agencies.

The country also plans to run security checks on dozens of IT systems in the private sector. That's a broad sweep, and it signals Seoul now treats private-sector infrastructure — not just regulated banks — as part of the attack surface.

One-sentence takeaway: the regulator is shifting from reacting to screening, but the checks haven't started yet and the breaches keep coming.

Is this part of a wider Asian problem?

Yes, in scale at least. Just yesterday, Japan reported a cybersecurity incident involving GMO Internet, following a series of attacks on Japanese financial institutions.

Investigators, though, have not established any connection between the incidents in the two countries. The wave of attacks across Asia underscores growing cybersecurity challenges in the region — challenges that security watchers attribute, in part, to years of weak cybersecurity defenses.

The takeaway: whether or not the attacks are coordinated, the region's under-invested defenses are making every incident easier to pull off.

Who has responded?

So far, almost nobody. The Financial Services Commission (FSC), Daishin Securities, Bithumb and Mirae Asset Global Investments did not immediately respond to requests for comment.

For Daishin's 38,490 affected customers, the concrete facts are these: names, emails and phone numbers are out, the company says it will compensate legally required losses, and the investigation is ongoing. For Mirae Asset and Bithumb customers, the picture is murkier — neither firm has confirmed data theft.

What comes next is the private-sector security sweep. If it turns up the same weaknesses the September attackers exploited, expect Seoul to push harder regulation — and expect the region's financial firms to start spending on cybersecurity like it's a line item they can't defer.