Daishin Securities apologizes again over data breach, announces customer support measures

Daishin Securities has announced a package of support measures for customers whose personal credit information was stolen in a recent hacking incident.

The brokerage posted a notice on its website Monday, issuing a fresh apology over the data leak and outlining its response.

As a key measure, Daishin Securities will enroll affected customers in insurance covering losses from voice phishing and smishing attacks, with coverage of up to 10 million won ($7,360) per year. Customers do not need to apply individually — the company will handle enrollment on their behalf.

The firm will also waive domestic stock trading commissions for the entire month of December, along with fees for deposit and withdrawal transactions and security-related services.

Each affected customer will also receive 10,000 won in cash, with payment scheduled for Dec. 1.

Separately from these support measures, affected customers retain the right to seek civil damages. They may also file for dispute mediation through the Personal Information Dispute Mediation Committee and exercise other rights available under applicable law.

"The support benefits do not affect customers' ability to exercise their legal rights," a company official said.

Daishin Securities detected signs of unauthorized access on Oct. 17 on a server linked to the non-face-to-face account opening system for discretionary investment services. After a 10-day comprehensive investigation, the company confirmed the breach on Oct. 26 and disclosed on Oct. 27 that the personal credit information of approximately 38,000 customers had been leaked.

The compromised data covered eight categories: customer name, email address, postal address, telecommunications ID, bank name, deposit and withdrawal account number, Daishin Securities integrated account number, and mobile phone number. Of these, the account numbers and mobile phone numbers were stored in encrypted form.

Immediately after detecting the incident, the company blocked the IP addresses and bypass routes used in the attack and reported the breach to the relevant authorities.

Since then, Daishin Securities has strengthened its information security framework — including blocking abnormal access attempts — and stepped up vulnerability assessments of external systems. An upgrade of its integrated security monitoring system is also underway. The company plans to enhance its AI-based vulnerability analysis capabilities and add AI functions to the integrated security monitoring system.

The company also urged customers to stay alert to potential secondary harm, including impersonation calls from financial institutions and unsolicited loan or investment solicitations exploiting the leaked data.

"We take very seriously the concern this data leak has caused our customers," a Daishin Securities official said. "We will do our utmost to protect customers — ensuring the support measures are fully carried out, providing guidance on preventing further harm, and swiftly processing relief procedures should additional damage be reported."