INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Financial institutions' 16 locations hacked resulting in leaked personal info

| 2026-10-14 06:21 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
South Korea's Financial Regulator discovered security management weaknesses across the financial sector in a recent inspection of 555 financial institutions, conducted over the past eight days. The Financial Supervisory Commission has decided to strengthen the security management responsibilities of CEOs and expand the frequency of security audits for large financial institutions to at least twice a year. Approximately 100,000 cases of personal data have been leaked from 16 financial institutions that were targeted in recent cyber attacks, including Shinhan Bank, KB Kookmin Bank, Hana Bank, and others. The attack works by exploiting vulnerabilities such as unapplied security patches, outdated systems without technical support, and the absence of a 24/7 security monitoring system. As of now, the Financial Supervisory Commission is investigating the attack routes and methods, while also planning to expand its efforts to strengthen the security management system across all financial institutions.
Technical Mitigations AI-generated
• Apply security patches to institutions lacking unapplied security patches. • Replace outdated equipment and systems with updated ones for those lacking technical support. • Establish a 24/7 security monitoring system for institutions without one.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
governmentgovernment financefinance
Incident Timeline
‎2026/10/14
The Financial Supervisory Commission reported that 16 financial institutions, including Shinhan Bank and KB Kookmin Bank, have been hacked, resulting in the disclosure of approximately 100,000 cases of personal information.
organisation The Financial Services Commission
The Financial Services Commission has decided to strengthen the security management responsibilities of CEOs and expand the frequency of security audits for large financial institutions to at least twice a year.
organisation The Financial Supervisory Service
The Financial Supervisory Service, Financial Security Institute, and other related agencies held a 'Second Emergency Response Conference' on 14th, chaired by Shin Chang, under the Ministry of Finance and Securities, to discuss the consequences of the cyber attacks and the measures to strengthen the security management system.
organisation Financial Security Institute
The Financial Supervisory Service, Financial Security Institute, and other related agencies held a 'Second Emergency Response Conference' on 14th, chaired by Shin Chang, under the Ministry of Finance and Securities, to discuss the consequences of the cyber attacks and the measures to strengthen the security management system.
organisation the Ministry of Finance and Securities
The Financial Supervisory Service, Financial Security Institute, and other related agencies held a 'Second Emergency Response Conference' on 14th, chaired by Shin Chang, under the Ministry of Finance and Securities, to discuss the consequences of the cyber attacks and the measures to strengthen the security management system.
organisation the Shinhan Bank
According to the Financial Supervisory Commission, the financial institutions that have confirmed the cyber attacks before and after the Shinhan Bank incident include Shinhan Bank, KB Kookmin Bank, Hana Bank, and a total of 16 institutions.
organisation Shinhan Bank
According to the Financial Supervisory Commission, the financial institutions that have confirmed the cyber attacks before and after the Shinhan Bank incident include Shinhan Bank, KB Kookmin Bank, Hana Bank, and a total of 16 institutions.
organisation KB Kookmin Bank
According to the Financial Supervisory Commission, the financial institutions that have confirmed the cyber attacks before and after the Shinhan Bank incident include Shinhan Bank, KB Kookmin Bank, Hana Bank, and a total of 16 institutions.
organisation Hana Bank
According to the Financial Supervisory Commission, the financial institutions that have confirmed the cyber attacks before and after the Shinhan Bank incident include Shinhan Bank, KB Kookmin Bank, Hana Bank, and a total of 16 institutions.
organisation The Financial Supervisory Commission
The Financial Supervisory Commission has reported that the possibility of additional incidents is high.
The Chairman of the Financial Supervisory Commission stated, "Despite ordering repeated inspections and management enhancements, cases of basic aspects being neglected in financial institutions have been found to be very disappointing."
organisation The Financial Regulator
The Financial Regulator has instructed the affected companies to apply security patches, replace outdated equipment, and strengthen access controls immediately.
organisation The Financial Authority
The Financial Authority plans to expand the frequency of security vulnerability assessments and evaluations for large financial institutions from once a year to twice a year or more.
In addition, the Financial Authority is considering the establishment of an AI security monitoring system for small and medium-sized financial institutions that lack sufficient security resources.
Intelligence Sources
Chosun Economy 2026-10-14