INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Shinhan and KB form 'Basic Control' with Hana separation

| 2026-10-06 02:30 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A massive data breach exposed sensitive information of hundreds of millions of customers in South Korea, with Shinhan Bank, KB Kookmin Bank, and Hana Bank being under scrutiny for their handling of customer data. The breach involved the use of artificial intelligence to launch a series of hacking attacks on the banks' external work support and inquiry systems, rather than their core financial transaction systems. Approximately 25,000 people's data was compromised at Shinhan Bank, while Citizens Bank customers saw 119 of their information exposed, and Hana Bank customers saw 89 of their information exposed. The attackers targeted individual users who were able to bypass authentication and access customer information, which was then used to extract additional information. Seven banks in total were affected by the same attack, with the same IP address being used, but some banks were able to avoid damage due to basic security controls such as restricted access to loan application systems and multi-authentication measures.
Technical Mitigations AI-generated
• Use multi-authentication to prevent unauthorized access, as seen in NH NongHyup Bank's implementation of separate certificate and biometric authentication. • Implement repeated login blockage to prevent attackers from accessing systems from the same IP address, a feature used by banks that were able to prevent the attack. • Restrict access to sensitive systems to only be accessed from designated terminals or devices, as seen in Woori Bank's restriction of loan application system access to a tablet terminal.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance governmentgovernment
Incident Timeline
‎2025/10/06
Citizens Bank invested the most in information security among four major banks, with a total of 43.3 billion won, according to the Financial Services Commission's Personal Credit Information Utilization and Management Continuous Evaluation.
organisation Citizens Bank
The agency stated that the four major banks had invested a combined 43.3 billion won in information security last year, with Citizens Bank investing the most at 43.3 billion won.
general_metric 43.3 banks
The agency stated that the four major banks had invested a combined 43.3 billion won in information security last year, with Citizens Bank investing the most at 43.3 billion won.
organisation Financial Security
Shinhan Bank received the Financial Security Merit Award last year, and has received a 5-year consecutive S-grade rating from the Financial Services Commission's Personal Credit Information Utilization and Management Continuous Evaluation.
organisation the Financial Services Commission's
Shinhan Bank received the Financial Security Merit Award last year, and has received a 5-year consecutive S-grade rating from the Financial Services Commission's Personal Credit Information Utilization and Management Continuous Evaluation.
‎2026/09/06
Threat actors used artificial intelligence to launch a series of hacking attacks that resulted in the recent data breach.
tactic Data Breach
The recent data breach, which began in late last month, involved the use of artificial intelligence (AI) to launch a series of hacking attacks.
‎2026/10/06
Seven major South Korean banks, including Shinhan Bank and Hana Bank, were hit by a cyberattack lasting approximately forty-two hours.
organisation KB
Shinhan, KB, and Hana banks are splitting into two groups, with Shinhan and KB forming one group and Hana forming another, under the name 'Basic Control'.. South Korea's major banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, are under scrutiny for their handling of customer data after a massive data breach exposed sensitive information of hundreds of millions of customers.
organisation Hana
Shinhan, KB, and Hana banks are splitting into two groups, with Shinhan and KB forming one group and Hana forming another, under the name 'Basic Control'.. South Korea's major banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, are under scrutiny for their handling of customer data after a massive data breach exposed sensitive information of hundreds of millions of customers.
organisation Shinhan Bank
Shinhan, KB, and Hana banks are splitting into two groups, with Shinhan and KB forming one group and Hana forming another, under the name 'Basic Control'.. South Korea's major banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, are under scrutiny for their handling of customer data after a massive data breach exposed sensitive information of hundreds of millions of customers.
organisation KB Kookmin Bank
Shinhan, KB, and Hana banks are splitting into two groups, with Shinhan and KB forming one group and Hana forming another, under the name 'Basic Control'.. South Korea's major banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, are under scrutiny for their handling of customer data after a massive data breach exposed sensitive information of hundreds of millions of customers.
organisation Hana Bank
Shinhan, KB, and Hana banks are splitting into two groups, with Shinhan and KB forming one group and Hana forming another, under the name 'Basic Control'.. South Korea's major banks, including Shinhan Bank, KB Kookmin Bank, and Hana Bank, are under scrutiny for their handling of customer data after a massive data breach exposed sensitive information of hundreds of millions of customers.
organisation KISA
According to the Korea Internet & Security Agency (KISA), the recent data breach has highlighted the need for the financial sector to reorient its investment in information security.
organisation Woori Bank
Woori Bank invested 36.4 billion won with 101 personnel.
organisation Hana Bank's
Korean banks have been hit by a cyberattack that lasted for approximately forty-two hours, with Hana Bank's ODS system being breached.
organisation ODS
Korean banks have been hit by a cyberattack that lasted for approximately forty-two hours, with Hana Bank's ODS system being breached.
organisation IP
The financial authorities have confirmed that seven banks, including banks, savings banks, and capital markets, were affected by the same attack, with the same IP address being used.
organisation NH NongHyup Bank
NH NongHyup Bank has also taken steps to prevent internal network access by the loan application personnel, and instead has allowed the loan application to be handled by the sales team at the branch.
organisation the Ministry of Science
Citizens Bank received the Ministry of Science and ICT Minister's Commendation at the 24th Republic of Korea Information Protection Target.
organisation ICT
Citizens Bank received the Ministry of Science and ICT Minister's Commendation at the 24th Republic of Korea Information Protection Target.
organisation Korea Information Protection Target
Citizens Bank received the Ministry of Science and ICT Minister's Commendation at the 24th Republic of Korea Information Protection Target.
organisation Continuous Evaluation of Information Protection
Hana Bank also received the Financial Services Commission's Continuous Evaluation of Information Protection for the 5th consecutive year, the highest S-grade, and the Information Protection Commendation for the Chairman of the Financial Commission.
organisation the Information Protection Commendation
Hana Bank also received the Financial Services Commission's Continuous Evaluation of Information Protection for the 5th consecutive year, the highest S-grade, and the Information Protection Commendation for the Chairman of the Financial Commission.
organisation the Financial Commission
Hana Bank also received the Financial Services Commission's Continuous Evaluation of Information Protection for the 5th consecutive year, the highest S-grade, and the Information Protection Commendation for the Chairman of the Financial Commission.
organisation The Financial Supervisory Commission
The Financial Supervisory Commission has broadcasted the attack IP and security matters to approximately 500 financial institutions.
victims 119 customers
Citizens Bank customers saw 119 of their information exposed, while Hana Bank customers saw 89 of their information exposed.
victims 89 customers
Citizens Bank customers saw 119 of their information exposed, while Hana Bank customers saw 89 of their information exposed.
Tactical Metrics
Metrics
victims
119
Customers
Citizens Bank customers saw 119 of their information exposed, while Hana Bank customers saw 89 of their information exposed.
Metrics
victims
89
Customers
Citizens Bank customers saw 119 of their information exposed, while Hana Bank customers saw 89 of their information exposed.
Intelligence Sources
Chosun Economy 2026-10-06