韩国金融业再遭网络攻击，大信证券泄露 38,490 名客户信息
South Korea’s financial industry hit by fresh wave of cyberattacks
- 1韩国大信证券、未来资产与加密交易所 Bithumb 再遭网络攻击，距 9 月那波金融业攻击约一个月
- 2大信证券通报泄露 38,490 名客户的姓名、邮箱和手机号，称将依法赔偿相关损失
- 3安全研究人员将 9 月攻击与一名疑似中国黑客关联，其使用了名为 Artex 的 AI 渗透测试工具
- 4韩国金融监管机构呼吁强化网络安全，计划对私营部门数十个 IT 系统开展安全检查
这轮攻击原因尚未查明，但 9 月攻击已被关联到使用 AI 渗透测试工具的黑客，高能力攻击的使用门槛在下降。
- 影响：客户数据泄露会直接带来通知、赔偿和监管检查成本；金融、加密资产等数据密集业务更易成为攻击目标；监管加强检查将推高安全合规投入。
- 参考：可考虑盘点自有与第三方 IT 系统的客户数据暴露面，重估收集和留存是否最小化；值得对照监管检查方向，先演练一次数据泄露的通知与赔付流程。
- 依据：大信证券 38,490 名客户信息泄露的口径来自当地媒体报道；9 月攻击与 AI 工具 Artex 的关联出自安全研究人员，最新事件原因仍在调查。
South Korea’s financial institutions have been hit by another wave of cyberattacks, highlighting the growing risk of AI-driven hacking in Asia. The latest incidents affect brokerages Daishin Securities and Mirae Asset Global Investments, as well as the crypto exchange Bithumb.
The incident comes roughly a month after a series of cyberattacks targeting South Korean financial institutions, raising concerns about vulnerabilities beyond just the country’s banking systems. Security researchers linked the September wave of attacks on South Korea to a suspected China-based hacker who relied on an AI penetration testing tool called Artex, though officials are still investigating the root cause of the latest breaches.
According to a local news, Daishin reported a cyberattack that exposed the personal information of 38,490 customers, including names, email addresses, and mobile phone numbers. The company has notified affected customers, is cooperating with authorities in the investigation, and will compensate for any losses as required by law.
Meanwhile, Mirae and Bithumb reported separate cybersecurity incidents on Wednesday, per local media, though neither has confirmed that customer data was taken.
South Korea’s financial regulator has called for stronger cybersecurity measures following a string of attacks on financial firms and government agencies, per officials in Seoul on Wednesday. The country also plans to conduct security checks on dozens of IT systems in the private sector.
Yesterday, Japan reported a cybersecurity incident involving GMO Internet, following a series of attacks on its financial institutions. The wave of cyberattacks across Asia underscore growing cybersecurity challenges in the region, often as a result of years of weak cybersecurity; though, investigators have not established a connection between the incidents.
South Korea’s Financial Services Commission (FSC), Daishin Securities, Bithumb and Mirae Asset Global Investments did not immediately respond to requests for comment.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.
Kate Park is a reporter at TechCrunch, with a focus on technology, startups and venture capital in Asia. She previously was a financial journalist at Mergermarket covering M&A, private equity and venture capital.
来源：TechCrunch · AI · techcrunch.com