In a significant development for South Korea’s financial sector, President Lee Jae-myung has ordered a thorough investigation into a series of recent cyberattacks that have led to personal information leaks from multiple commercial banks and financial companies. The directive came on October 4th, following a briefing on the ongoing data breaches and the government’s response.
Widespread Data Breaches Across Financial Institutions
The cyber incidents have affected several prominent banks, including Shinhan Bank, KB Kookmin Bank, Hana Bank, and BNK Busan Bank. Additionally, savings banks and loan companies have also been targeted by hackers. The scope of the breaches varies, with some incidents impacting a substantial number of customers and others affecting a smaller, more targeted group.
According to reports, Shinhan Bank experienced an attack on its system for loan agency inquiries starting September 28th, potentially exposing the information of 25,729 customers over three consecutive days. KB Kookmin Bank disclosed on September 30th that its mobile business support system, used by employees, was compromised, leading to the theft of information belonging to 119 customers. On the same day, Hana Bank reported a data leak from its sales support system, affecting 89 customers.
BNK Busan Bank discovered on October 1st that personal information of 11 outsourced developers was leaked. Woori Bank and NH Nonghyup Bank have also detected unusual external access attempts, indicating ongoing threats to the financial system.
Government Response and Presidential Directive
Presidential Office Chief Spokesperson Kang Chun-suk announced that President Lee Jae-myung received a report on the personal information leaks from financial and public institutions and the measures being taken. The President emphasized the seriousness of the situation and called for a meticulous investigation and the implementation of effective countermeasures.
In response to the escalating situation, the Financial Services Commission Chairman Lee Eui-won and the Financial Supervisory Service Governor Lee Chan-jin convened an emergency meeting on the afternoon of October 4th. The meeting, held at the Central Government Seoul Office, brought together leaders from financial institution associations and CEOs of the financial companies that experienced the information leaks. The agenda focused on understanding the extent of the breaches and coordinating a robust response strategy.
Call for Stringent Measures and Future Preparedness
The directive from President Lee highlights the government’s commitment to safeguarding sensitive customer data and maintaining public trust in the financial system. The investigation is expected to delve into the vulnerabilities that allowed these attacks to succeed and to identify the perpetrators. Beyond the immediate investigation, there is a strong emphasis on developing and implementing effective, long-term strategies to prevent future incidents.
This series of attacks underscores the persistent and evolving threats faced by the financial sector from cybercriminals. The South Korean government’s swift and firm response signals its determination to bolster cybersecurity defenses and ensure the integrity of its financial infrastructure. The outcomes of the investigation and the subsequent measures will be closely watched by both domestic and international stakeholders.
