Daishin Securities to Pay 10,000 Won to Hacking Victims, Cover Phishing Insurance | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker


Screenshot of Daishin Securities’ websiteDaishin Securities (003540) has put together a support package for customers whose personal credit information was exposed in a recent hacking incident, including enrollment in voice phishing insurance, fee waivers and compensation payments.Daishin Securities apologized again for the data breach in a notice posted on its website on the 9th and announced the measures for affected customers. The company will enroll those customers in insurance covering losses from voice phishing and smishing. The coverage runs for one year with a payout limit of up to 10 million won. Customers do not need to apply separately, as the brokerage will enroll them collectively.The firm will also waive fees. Daishin Securities said it will waive domestic stock trading commissions for affected customers for one month starting next month. Related costs are excluded. The waiver applies to one comprehensive account and up to 10 consigned accounts. Service fees for deposits, withdrawals and security devices will also be waived during the same period.The company will pay 10,000 won per customer in compensation. The payment is scheduled for the 1st of next month. Daishin Securities said it will notify each customer individually of the support measures that apply to them.Separately from the support package, affected customers may exercise their rights under the law, including filing civil damage claims or requesting mediation from the Personal Information Dispute Mediation Committee. Daishin Securities said accepting the support benefits does not affect those rights.Daishin Securities detected signs of abnormal access on a server linked to the opening of non-face-to-face discretionary investment accounts on Oct. 17. After a 10-day full review, it confirmed the data breach on Oct. 26 and disclosed on Oct. 27 that the personal credit information of about 38,000 people had been exposed.The exposed data covered eight items, including customer names, email addresses, postal addresses, telecommunications IDs, bank names, deposit and withdrawal account numbers, Daishin Securities comprehensive account numbers and mobile phone numbers. Of these, the deposit and withdrawal account numbers, comprehensive account numbers and mobile phone numbers were encrypted.Immediately after detecting the incident, the company blocked the IP addresses and bypass access routes used in the attack and reported the case to relevant authorities. To prevent a recurrence, it strengthened its information management system with measures such as blocking abnormal access and stepped up vulnerability checks on external systems. The company also plans to upgrade its integrated security monitoring system and build up its vulnerability analysis capabilities using artificial intelligence.

Click Here For The Original Source.

——————————————————–

............