[Anchor]
Mirae Asset Global Investments has suffered a hacking attack on its website containing information on how it manages a portion of public pension funds. The security system was breached using a rudimentary method where the hacker simply guessed membership numbers one by one until a match was found.
Reporter Lee Seong-hoon has the details.
[Reporter]
This time, the website for the Public Pension Fund Investment Pool, which compiles information on the management of surplus funds from the government and public institutions, has become a target for hackers.
Mirae Asset Global Investments, the lead manager handling about 38 trillion won out of the total 88 trillion won in public pension fund investment trust assets, had its business website hacked last month.
The security network was breached despite the hackers using a basic method of continuously querying by systematically changing membership numbers one by one.
They leaked not only the IDs, names, and emails of 331 users, but also market information and training materials stored in the data archive, as well as the daily returns of fully discretionary funds from last year.
Personal information of 2,281 executives and employees from overseas subsidiaries and the headquarters was also leaked from the internal business system.
Mirae Asset Global Investments had reported to the Financial Supervisory Service that all 12 items were faultless in a self-security inspection requested by the agency two weeks prior to the hack, yet it collapsed futilely.
The government and Mirae Asset stated, “Since the website in question is intended for information provision, there is no impact on actual fund management.”
At Mirae Asset’s affiliated securities firm, the information of some 39,000 customers and employees was also leaked over two days starting from the 4th.
Criticism is mounting that despite boasting the industry’s largest scale, its security management was shockingly lax.
[Lee Han-ul / Vice President, Aim Intelligence : Up until now, security has been regarded as somewhat of a nuisance. So even when requests are made to patch such vulnerabilities on the service side, the reaction has very often been, ‘Ah, why are they being such a nuisance again?’]
Criticism continues that financial institutions must properly adhere to the basics, if only to maintain customer trust, which is the foundation of their business.
Video by Jung Yong-hwa | VJ by Lee Ji-hwan
※ Please note: This article was translated by AI and may contain errors.
Click Here For The Original Source.
——————————————————–
