INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Shinhan, KB Kookmin, Hana Banks Exposed Vulnerabilities Through Weak Systems

| 2026-10-05 02:08 HIGH LOW DATA BREACH VULNERABILITY DISCLOSURE
JSON
Executive Summary
AI-generated
A series of cyber attacks on South Korean banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, resulted in the leak of customer information. The incident occurred when an attacker accessed a mobile support system used by employees, exploiting vulnerabilities in the authentication and access control systems. According to the Financial Supervisory Commission's materials submitted to National Assembly member Y Yang-soo, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank alone, with all three banks spending approximately 124 billion won on security measures. The attack targeted weaknesses in individual business support systems used by loan collectors and bank employees, which were not adequately protected against external attacks, highlighting a key focus of the investigation into the incident.
Technical Mitigations AI-generated
• Patch the Rockwell training program at the NATO's Cyber Defense Center to address vulnerabilities in AI-powered systems. • Implement additional authentication for mobile work systems, such as requiring employees to use two-factor authentication or biometric login. • Regularly monitor and audit the external audit of the company that handled data collection and disposal tasks.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎2025/10/05
Threat actors exploited vulnerabilities in individual systems of Shinhan, KB Kookmin, and Hana Banks to compromise their collective security rating.
general_metric 124 won
The total amount spent on information protection last year was approximately 124 billion won.
organisation the National Assembly
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
organisation the People Power Party
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
general_metric 53 year
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
general_metric 39 Bank
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
general_metric 31.675 Bank
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
general_metric 123.974 won
According to the Financial Supervisory Commission's materials submitted to the National Assembly member Y Yang-soo of the People Power Party, the total information protection expenditure for last year was 53 billion won for KB Kookmin Bank, 39 billion won for Shinhan Bank, and 31.675 billion won for Hana Bank, totaling 123.974 billion won.
‎2026/10/05
South Korean banks, Shinhan Bank, KB Kookmin Bank, and Hana Bank spent 120 billion won on security measures but their vulnerabilities were exposed through weak individual systems.
organisation the Financial Supervisory Commission's
…Commission's 'Personal Credit Information Management and Protection Inspection' * Domestic and international information protection certifications * Regular security training with the Financial Security Agency * Participation in the 'Rockwell' training program at the North Atlantic Treaty Organization's (NATO) Cyber Defense Center in 2025, which was the first for a Korean financial institution.
organisation the Financial Security Agency
…Commission's 'Personal Credit Information Management and Protection Inspection' * Domestic and international information protection certifications * Regular security training with the Financial Security Agency * Participation in the 'Rockwell' training program at the North Atlantic Treaty Organization's (NATO) Cyber Defense Center in 2025, which was the first for a Korean financial institution.
organisation Rockwell
…Commission's 'Personal Credit Information Management and Protection Inspection' * Domestic and international information protection certifications * Regular security training with the Financial Security Agency * Participation in the 'Rockwell' training program at the North Atlantic Treaty Organization's (NATO) Cyber Defense Center in 2025, which was the first for a Korean financial institution.
organisation the North Atlantic Treaty Organization's
…Commission's 'Personal Credit Information Management and Protection Inspection' * Domestic and international information protection certifications * Regular security training with the Financial Security Agency * Participation in the 'Rockwell' training program at the North Atlantic Treaty Organization's (NATO) Cyber Defense Center in 2025, which was the first for a Korean financial institution.
organisation NATO
…Commission's 'Personal Credit Information Management and Protection Inspection' * Domestic and international information protection certifications * Regular security training with the Financial Security Agency * Participation in the 'Rockwell' training program at the North Atlantic Treaty Organization's (NATO) Cyber Defense Center in 2025, which was the first for a Korean financial institution.
organisation Hana Banks
Shinhan, KB Kookmin, and Hana Banks spent 120 billion won and achieved a '100-point' security rating, but... their vulnerabilities were exposed through weak individual systems.. South Korean banks, Shinhan Bank, KB Kookmin Bank, and Hana Bank, have been hit by a series of cyber attacks, resulting in the leak of customer information.
organisation Shinhan Bank
Shinhan, KB Kookmin, and Hana Banks spent 120 billion won and achieved a '100-point' security rating, but... their vulnerabilities were exposed through weak individual systems.. South Korean banks, Shinhan Bank, KB Kookmin Bank, and Hana Bank, have been hit by a series of cyber attacks, resulting in the leak of customer information.
organisation KB Kookmin Bank
Shinhan, KB Kookmin, and Hana Banks spent 120 billion won and achieved a '100-point' security rating, but... their vulnerabilities were exposed through weak individual systems.. South Korean banks, Shinhan Bank, KB Kookmin Bank, and Hana Bank, have been hit by a series of cyber attacks, resulting in the leak of customer information.
organisation Hana Bank
Shinhan, KB Kookmin, and Hana Banks spent 120 billion won and achieved a '100-point' security rating, but... their vulnerabilities were exposed through weak individual systems.. South Korean banks, Shinhan Bank, KB Kookmin Bank, and Hana Bank, have been hit by a series of cyber attacks, resulting in the leak of customer information.
organisation Bank
One Bank has also announced that it has allocated an information protection budget at a level above the recommendations of the financial regulatory authority annually.
Intelligence Sources
Chosun Economy 2026-10-05