Mirae Asset Life breach: customer personal and credit information confirmed leaked
Mirae Asset Life said on October 26, 2026 that a breach of its customer insurance application system and parts of its website leaked customer personal and credit information, and that it is still investigating how many customers are affected and exactly what was taken.
What happened
Mirae Asset Life Insurance announced on October 26, 2026 that a cyber breach in some of its computer systems had led to a leak of customer personal information. The company said it detected suspicious activity in its systems the previous day, Sunday, October 25, and that the breach was identified in parts of its customer insurance application system and its website. After analysing the incident with external cybersecurity specialists, the company confirmed early on Monday that personal and credit information had been leaked. Its response, as announced, was to activate a company-wide emergency response system, block the internet protocol addresses used in the attack, strengthen its security measures and temporarily suspend access to its website to contain further damage. The company apologised to customers. What is not yet known, on the company’s own account, is the scale: the number of customers affected, the specific items of information taken and the path the intruder used are all still under investigation, and the company says they will be confirmed from the investigation’s results.
Who is affected
Customers of Mirae Asset Life whose information sat in the affected application system or website — the company has not yet said how many people that is, or exactly which items of their information were taken. The confirmed category is personal and credit information. The disclosure makes this the first reported hacking-related leak in South Korea’s insurance sector, and the latest in a wave of attacks on the country’s financial industry since late September 2026. On October 14 the Financial Services Commission, the financial regulator, said intrusions had been confirmed at 16 financial companies — banks, savings banks and other lenders among them — with about 100,000 personal data records exposed in total, including names, contact details, resident registration numbers and email addresses; among the largest single cases, Yegaram Savings Bank reported 42,926 customers affected and Shinhan Bank 25,729. Whether the Mirae Asset Life attack is connected to those earlier cases is not yet clear.
How serious
The concrete risk is identity fraud built on credit information: personal and credit details are the raw material for fraudulent loan and credit applications made in a customer’s name, and for targeted phishing in which a scammer poses as the insurer and already knows enough about the customer to sound genuine. Mirae Asset Life itself urged customers to stay vigilant against suspicious messages, phone calls and emails, particularly ones impersonating the company or trying to obtain more personal information. Financial authorities in South Korea have warned, about this wave of attacks generally, that stolen personal information can be exploited for identity theft, fraudulent loan applications and phishing scams even where the information needed to withdraw funds directly — such as account passwords — has not been compromised. Two limits matter for this incident specifically: the company has not said that passwords or bank account credentials were taken, and until it publishes the count and the item list, no customer can yet know whether their own information is in the leaked set.
What to do now
If you are a Mirae Asset Life customer, watch for an official notification from the company and treat unexpected calls, texts or emails that claim to be from the insurer — especially any that ask you to hand over more personal or financial information, or a verification code — as unproven until you have checked them through a channel you open yourself, such as the company’s official website or a number you already have. That caution is the company’s own advice. Keep an eye on your bank and credit activity for loan or credit applications and transactions you do not recognise, and report anything unfamiliar to the provider promptly — credit information is the category confirmed leaked here, so credit files are the place this kind of misuse shows up first. Do not use links or phone numbers supplied inside a suspicious message to do the checking. When the company publishes who was affected and what was taken, follow that notice for any further steps it sets out.
Sources: Aju Press report of the company’s announcement · JKN report of the company’s announcement