INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Fintech Investors Hacked via Phishing Attack Exposing Customer Data

| 2026-11-01 16:28 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach incident occurred at 2:30 am on October 23, 2023, targeting the files submitted by customers prior to 7:24 am on that day. The attack affected South Korean fintech company Mooin (㈜Moin), resulting in the unauthorized release of personal information of its customers and their family members, shareholders, and business counterparts. This leaked data includes identification documents, financial information, driver's license numbers, passport numbers, foreigner registration numbers, resident registration cards, and other sensitive details. The breach may also have affected non-members who were included as targets for disclosure due to the nature of the submitted files. Mooin has not disclosed the total number of victims or specific entry path of the attacker so far, but it has established a separate inquiry channel to verify personal information disclosure.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎October 19, 2023
Threat actors accessed customer files prior to 7:24 am on October 19, 2023, resulting in the leakage of personal information including ID, resident registration number, and account details.
industry Finance
General Document Context
organisation the Personal Information Protection Commission
It also reported the incident to the Personal Information Protection Commission, KISA (Korea Internet & Security Agency), and the Financial Supervisory Service.
organisation KISA
It also reported the incident to the Personal Information Protection Commission, KISA (Korea Internet & Security Agency), and the Financial Supervisory Service.
organisation Korea Internet & Security Agency
It also reported the incident to the Personal Information Protection Commission, KISA (Korea Internet & Security Agency), and the Financial Supervisory Service.
organisation the Financial Supervisory Service
It also reported the incident to the Personal Information Protection Commission, KISA (Korea Internet & Security Agency), and the Financial Supervisory Service.
‎October 23
Threat actors breached the foreign remittance fintech's systems at 2:30 am on October 23, resulting in the unauthorized disclosure of customer personal information.
tactic Data Breach
According to Mooin, the actual data breach occurred at 2:30 am on October 23.
‎October 29
Threat actors gained unauthorized access to customer files submitted by the company, resulting in the leakage of personal information including ID, resident registration number, and account details.
general_metric 3 pm
On October 29, around 3 pm, the company confirmed that personal information of its customers had been leaked due to unauthorized access to the files submitted by customers.
‎October 30
Mooin announced a data breach on October 30, stating that customer personal info including ID and account information was leaked.
tactic Data Breach
Mooin announced the incident on its official website on October 30, stating that it had posted a notice on its website regarding the data breach and its apology.
Intelligence Sources
Dailysecu 2026-11-01