South Korea reports breaches at 16 financial firms and about 100,000 leaked records
In short
South Korean authorities reported cybersecurity incidents at 16 financial firms and the leak of about 100,000 personal-information records. A separate self-assessment by 555 firms found security shortcomings at 130, prompting plans for broader checks.
Read the full story 1 min read
South Korean financial authorities reported on October 14 that cybersecurity incidents had been identified at 16 financial companies across banking, savings banks, mutual finance, lending, electronic finance, online investment-linked finance and virtual-asset businesses. About 100,000 personal-information records had leaked. The Financial Services Commission discussed the incidents and security measures at a second emergency response meeting in Seoul, according to Newsis and Kyunghyang Shinmun. [ 15 , 18 ]
The affected banks included Shinhan, KB Kookmin, Hana and BNK Busan, Newsis reported. Authorities said the leaked information included names, contact details, resident registration numbers and email addresses. They had not identified leaks of account or card numbers that could directly enable fraudulent payments. Companies continued checking for intrusions using shared attacker internet addresses, and authorities warned that the number of affected firms could increase. [ 14 , 15 ]
A security checklist self-assessment covering 555 firms found that 130 reported shortcomings, while 425 reported adequate controls. Kyunghyang Shinmun described missing security patches, weak management of systems whose manufacturer support had ended, absent round-the-clock monitoring and missing authentication or access controls. Investigators were examining intrusion routes, attack methods, connections between incidents, whether the same attackers were responsible and whether artificial intelligence had been used. [ 15 , 18 ]
Authorities plan a comprehensive review of financial-sector security systems and management. Chosun Ilbo reported plans to increase vulnerability checks at large financial firms from once a year to at least twice annually and strengthen chief executive and board responsibility. Hankook Ilbo reported plans to improve threat-information sharing and consideration of an AI-based shared monitoring system for smaller firms. A later Newsis report said DB Savings Bank stated that its security systems had blocked a hacking attempt and no general customer information had leaked. [ 7 , 22 , 26 ]
Why it matters
The leaked information included names, contact details, resident registration numbers and email addresses. Authorities said they had not identified leaks of account or card numbers that could directly enable fraudulent payments.
Key facts
- Authorities reported incidents at 16 financial firms and about 100,000 leaked personal-information records. [ 7 , 14 , 15 , 18 ]
- Security self-assessments found shortcomings at 130 of 555 firms. [ 15 , 18 , 22 ]
- Authorities warned that further affected firms could be identified. [ 5 , 14 , 15 , 18 ]
- Investigators are examining whether incidents are linked and whether AI was used. [ 15 , 18 ]
Confirmed by several sources
Still unclear
- Whether the attacks used AI or shared a perpetrator. Newsis and Kyunghyang Shinmun reported that these questions remain under investigation.