Abstract:
According to South Korean financial regulatory authorities and local media, since the end of September, cybersecurity incidents have occurred in various types of financial institutions in South Korea. The South Korean Financial Commission confirmed on October 14 that 16 financial institutions had been invaded at that time, and about 100,000 pieces of personal information were leaked; as new incidents were reported in the fields of securities, insurance, asset management, and virtual currencies, as of October 28, the number of publicly disclosed affected institutions had increased to at least 20.
Information released by the South Korean Financial Commission shows that the first batch of institutions confirmed to have been compromised cover banks, savings banks, consumer finance, online lending, electronic finance and virtual currencies, including Shinhan Bank, KB Kookmin Bank, Hana Bank and BNK Busan Bank. The leaked information mainly involves names, contact information, ID numbers and email addresses. Regulatory authorities stated that as of October 14, no information such as account passwords and bank card numbers that may directly lead to illegal transactions has been found to have been leaked.
In late October, the incident further affected the capital market. Dasin Securities disclosed that hackers accessed its server related to non-face-to-face account opening without authorization, resulting in the leakage of the names, email addresses, addresses and some account information of 38,490 customers. Bithumb, Mirae Asset Global Investment and Mirae Asset Life also successively discovered that their internal or business systems had been abnormally accessed, and South Korea's financial regulatory authorities subsequently intervened in the investigation.
Investigators found that attackers may have used artificial intelligence-assisted penetration tools in some incidents, but whether different incidents were carried out by the same attacker is still under investigation. The Korean Financial Commission also previously conducted security inspections on 555 financial institutions and found that 130 institutions had deficiencies in security patches, system monitoring, identity authentication or external access management, and required relevant companies to strengthen security protection and customer risk reminders.
Comments