EXPLORINEER
en

KR — 전자신문

Cyber Intrusions Spread to Insurers, Software and Travel Sectors as Financial Sector Breaches Mount

Security2 min read

Several Korean companies, including insurer Mirae Asset Life, software maker Douzone Bizon, and travel platform NOL, have reported hacking incidents in recent days. Data leaks have been found or are being checked, and the damage at KB Kookmin Bank has grown.

What happened

Hackers attacked several Korean companies at once. Mirae Asset Life, an insurance company, found strange activity in some of its systems on the 25th and reported it to the financial regulator. This is the first hacking case in the insurance industry. Douzone Bizon, a business software company, found illegal access to a development server. Travel platform NOL also confirmed that personal data was leaked. KB Kookmin Bank found more victims in an earlier case.

Key numbers

  • Mirae Asset Life: hackers looked at about 41 files. It is not yet known if personal data was leaked.
  • KB Kookmin Bank: 2,091 more people were found, bringing the total number of victims to 2,210 (up from 119).
  • The new privacy law, in force since September, requires companies to report possible leaks within 72 hours.
  • For serious leaks, the law allows fines of up to 10% of a company's total sales.

Background

A hacker attack is when outsiders break into a computer system to steal or damage data. A zero-day flaw is a security weakness that the software maker does not know about yet, so there is no fix. At Douzone Bizon, the attackers are believed to have used a zero-day flaw in the backup software made by Ahsay. Under the new privacy law, companies must also report even a possible leak, and the company's CEO has more responsibility for oversight.

Why it matters

Many companies are now reporting attacks quickly, instead of hiding them. This can help customers protect themselves sooner. But it also shows that many organizations have weak basic security. Experts say companies need strong basics, such as multi-factor login, access control, and encryption, and they must check for weak spots all the time, not just once.

What to watch

  • Whether Mirae Asset Life confirms that customer personal data was actually leaked, and how many people are affected.
  • The results of the joint investigation led by the Ministry of Science and ICT with private experts.
  • How many more NOL and Douzone Bizon customers are found to be affected.
  • Whether regulators take action or fine any of the companies under the new law.

Glossary

Mirae Asset Life
A Korean life insurance company that sells insurance policies to customers.
Douzone Bizon
A Korean company that makes business software used by other companies for accounting and management.
NOL
A travel and leisure platform run by NOL Universe, where users can book hotels and other services.
Ahsay
A company that makes backup software for storing copies of computer data.

More in this topic

SecurityThe Register

Microsoft releases emergency .NET security fixes for Google Brotli bug

Microsoft has issued an out-of-band security update for .NET 8, 9, 10, and 11 to patch a buffer overflow in Google's Brotli compression library, tracked as CVE-2026-111497 and rated 8.1 under CVSS v3.1. The flaw could let an unauthenticated attacker read or corrupt process memory, leading to information disclosure, denial of service, or elevation of privilege. Microsoft's advisory says exploitation is "More Likely," though it found no evidence yet that criminals are using working exploits in attacks.

SecurityITmedia

Customers to Sue Times Car Operator Over Data Leak, Lawyer Announces at Press Conference

Attorney Yuki Makino, who set up a class-action website, announced at a Tokyo press conference on October 26, 2026 that he will file a lawsuit at the Tokyo District Court against Park24, which operates Times Car, and its executives, seeking 30,000 to 50,000 yen per victim in damages. The suit follows a leak of up to about 6.6 million members' personal information, including driver's license images, after unauthorized access detected on September 25; more than 100,000 people have registered on the site.

SecurityITmedia

Joshin Unauthorized Access May Have Leaked Up to 6.23 Million Records, Including 2 Driver's Licenses and 1 My Number Card

Joshin, the Japanese electronics retailer that also runs a housing renovation business, said on October 26 that up to about 6.23 million member records may have leaked after unauthorized access to its network, which it had announced on the 17th. The data may include names, addresses, driver's license images, My Number Card information, and login details, and the company said the scope and whether any leak actually occurred are still under investigation. Joshin said it has no credit card information stored and warned users to be alert to suspicious emails, SMS messages, and calls impersonating the company.

SecurityITmedia

Nomura Research Institute launches service to support proactive system shutdowns during cyberattacks

Nomura Research Institute (NRI) and its subsidiary NRI Secure Technologies began offering "Cyber Resilience Management Support" on October 22, helping companies hit by cyberattacks decide when to proactively halt and resume systems. The service includes setting shutdown and restart criteria and decision-making flows, estimating financial costs and assessing harder-to-quantify risks such as brand damage. Support takes about two to three months at minimum and runs in four stages.