Daishin Securities breach affects 38,490 customers; account and mobile numbers among three fields marked as encrypted
Daishin Securities has disclosed and apologized for a breach of personal and credit information affecting 38,490 customers. An official notice issued in the name of CEO Jin Seung-wook says the company detected an unlawful external access attempt on October 17 and, following an investigation, became aware of the data breach on October 26. The company listed eight fields of potentially exposed information; the fields actually compromised differ from customer to customer. Daishin Securities’ official breach notice and apology
The listed fields are customer name, email address, address, communications ID, bank name, deposit and withdrawal account number, Daishin Securities comprehensive account number, and mobile phone number. The encryption label appears individually beside the deposit and withdrawal account number, Daishin Securities comprehensive account number, and mobile phone number. The notice does not say that all eight fields were encrypted. “Communications ID” is the notice’s own term; no basis was established for expanding it to mean telecommunications-carrier identification information. Exposed data fields in the official apology
Daishin Securities listed measures including blocking the accessing IP address, checking vulnerabilities, strengthening monitoring, notifying regulators and cooperating with investigations. While saying that no secondary harm had been identified as of the notice, the company warned that the exposed information could be misused and cautioned against impersonation attempts. Its statement that no harm had been identified so far is narrower than a guarantee that no further harm will occur. Official information on response measures and harm
The company also explained avenues of redress available to customers, including claims for damages, claims for statutory damages and applications for dispute mediation. This guidance does not contain a promise of automatic compensation for every customer or payment in full. The specific harm and loss, the claims process and actual compensation outcomes each require separate confirmation. Redress procedures in the company notice
The company warned customers about contacts seeking personal information or inducing money transfers under the pretext of compensation for the breach. The notice lists its Financial Support Center numbers as 1588-4488 and 1544-4488. These are the official contact details the company provided, allowing customers to compare them with the numbers used by people who approach affected customers first. Official contacts and precautions
EEJE Editorial Analysis: Customers need to know which fields were encrypted and which were not, the extent of harm the company has identified, and the redress channels they can actually use. The measures the company says it has taken and the losses for which customers have received compensation need to be tracked separately. This notice reports the scale of the breach, the response and the claims channels; it is not a record of blanket compensation outcomes. Review of the official notice