[Financial News] Following the leak of information belonging to approximately 25,000 customers of Shinhan Bank, customer information leaks have also been confirmed at KB Kookmin Bank and Hana Bank. Busan Bank reported the exposure of personal information belonging to outsourced development staff. Security concerns are mounting across the banking sector. According to financial industry sources on the 2nd, external hackers gained abnormal access to Hana Bank's sales support system (ODS), resulting in the exposure of personal information belonging to 89 customers. The leaked data included resident registration numbers, names, addresses, email addresses, phone numbers, mobile phone numbers and employer names. Hana Bank explained that the system is operated separately from its internet and mobile banking transaction systems, and that customers' financial transaction information was not leaked. It urgently blocked the relevant IP addresses and similar systems, and activated a response team involving its information and communications technology (ICT) group and financial consumer protection division. The affected customers are being notified individually. KB Kookmin Bank also announced that personal and credit information belonging to 119 customers had been leaked through an external breach. The specific data varied by customer but included names, phone numbers, addresses and encrypted resident registration numbers. The breached system was a mobile work-support system for employees and was separate from customer financial transaction systems such as internet and mobile banking, the bank said. KB Kookmin Bank detected the possibility of an information leak caused by abnormal external access on the night of the 30th of last month and blocked the affected server and access routes. It is informing the affected customers about the leak and ways to prevent secondary damage, while operating a dedicated call center. Shinhan Bank also confirmed a customer information leak on the 30th of last month. The number of affected customers identified so far is approximately 25,000. The leaked data included personal and credit information related to loan applications, such as customer names, phone numbers, annual income and calculated loan limits. The bank also determined that 66 resident registration numbers and 97 connection information (CI) records belonging to some customers had been leaked. The Shinhan Bank incident is believed to have occurred through an inquiry service used by loan solicitors. Shinhan Bank blocked external IP addresses and suspended related services, while working with the Financial Supervisory Service and the Financial Security Institute to determine the circumstances of the incident and the scope of the leak. Shinhan Bank, KB Kookmin Bank and Hana Bank said they intend to fully compensate customers if they suffer losses as a result of the information leaks. External hacking attacks were also attempted against Woori Bank and Nonghyup Bank. The two banks blocked the attacks through their security systems, and no damage, including customer information leaks, has been identified so far. Information leaks have also been confirmed at regional banks. According to Busan Bank, an external attack was attempted against a web server using an AI agent at 9 p.m. on the 1st, and the main attack was blocked. However, during a subsequent inspection, the bank found signs that personal information, including the names and phone numbers of 11 outsourced development employees, had been exposed through certain webpages with insufficient session verification. Busan Bank confirmed the leak at 4:30 a.m. that day and blocked the webpage in question. It reported the incident to financial authorities and the Personal Information Protection Commission (PIPC), and notified the outsourced development company and the affected employees. Busan Bank is continuing to monitor its systems for additional signs of abnormal activity. It plans to strengthen surveillance of AI-based attacks and conduct additional security checks using Attack Surface Management (ASM) across all externally accessible webpages. Meanwhile, the Financial Supervisory Service has begun on-site inspections related to the information leaks at Shinhan Bank and KB Kookmin Bank. [email protected] Ye Byeong-jeong and Lee Hyeon-jeong Reporter