韩国三家金融机构同日报告数据泄露:Bithumb内部系统被黑、大信证券约3.8万条客户信息外泄,未来资产亦确认遭入侵
首尔——据韩联社10月28日报道,韩国三家金融机构同日报告数据泄露:加密货币交易所 Bithumb 称其内部移动系统遭到黑客入侵、个人信息外泄;券商大信证券(Daishin Securities)称约3.8万条客户信息被泄露并已采取紧急措施;资产管理公司未来资产全球投资(Mirae Asset Global Investments)亦确认发生黑客入侵事件,当局正在评估情况。路透社援引韩联社作出上述报道,三家机构的发言人暂未回应路透社的置评请求。
Bithumb 表示,公司正在调查会员数据是否包含在此次外泄之中,目前尚未公布外泄信息的具体范围与入侵路径。大信证券公布的约3.8万条为三家机构中唯一给出具体数字的一家。
这三起事件是韩国金融业本月连环网络攻击的最新一起。据韩国金融委员会(FSC)本月早些时候公布,包括银行在内的16家韩国金融机构此前已遭一波黑客攻击,迄今造成约10万起数据泄露。韩国科学技术信息通信部与韩国互联网振兴院另已敦促网站运营商排查 PHP 漏洞——这类漏洞可让攻击者在未登录的情况下在服务器上执行恶意命令。
韩国是全球加密货币交易最活跃的市场之一,Bithumb 是该国主要交易所之一,总部位于首尔江南区。金融机构接连发生客户信息外泄后,韩国监管机构对金融业网络安全的检查力度预计将进一步加大;截至发稿,三家机构均未报告客户资金损失。
Three South Korean Financial Firms Report Data Breaches on the Same Day: Bithumb Hacked, Daishin Says About 38,000 Customer Records Leaked, Mirae Asset Also Confirms Intrusion
Seoul — Three South Korean financial firms reported data breaches on Wednesday, the Yonhap News Agency said, in reporting cited by Reuters on October 28: cryptocurrency exchange Bithumb said its in-house mobile system had been hacked and personal information leaked; brokerage Daishin Securities said about 38,000 pieces of customer information had been leaked and that it had taken emergency measures; and asset manager Mirae Asset Global Investments also confirmed a hacking incident, with authorities assessing the situation. Spokespeople for the three firms could not immediately be reached for comment by Reuters.
Bithumb said it was investigating whether member data was included in the leak; it has not disclosed the full scope of the exposure or the intrusion path. Daishin's figure of about 38,000 records was the only specific number given by any of the three firms.
The incidents are the latest in a wave of attacks on South Korea's financial sector this month. According to the Financial Services Commission (FSC) earlier this month, 16 South Korean financial firms, including banks, had already been hit, causing around 100,000 cases of data leaks so far. Separately, South Korea's Science Ministry and the Korea Internet & Security Agency have urged website operators to check for PHP flaws that let attackers run malicious commands on a server without logging in.
South Korea is one of the world's most active cryptocurrency markets, and Bithumb, headquartered in Seoul's Gangnam District, is one of its major exchanges. After the string of customer-data leaks, regulatory scrutiny of financial-sector cybersecurity in South Korea is expected to intensify; none of the three firms had reported customer fund losses as of publication.
来源:GSM·美国(原文链接)
图片来源:图:韩国首尔汝矣岛金融区天际线(资料图)。照片:S_h_y_numis,CC BY 4.0,经维基共享资源。 / The skyline of Yeouido, Seoul's financial district in South Korea (file photo). Photo: S_h_y_numis, CC BY 4.0, via Wikimedia Commons.

