Shinhan Bank Data Leak Affecting 25,000 Customers... Financial Supervisory Service Conducts On-Site Investigation

[Financial News] The financial sector is on edge following a massive hacking incident at Shinhan Bank that resulted in the leakage of personal information for over 25,000 customers. Financial authorities are viewing the matter very seriously, given that it involves a data breach at a major commercial bank required to maintain the highest level of security. Shinhan Bank has stated that it will fully compensate customers for their losses, along with issuing a public apology.
According to financial authorities on the 1st, Shinhan Bank confirmed the previous day that a hacking incident involving the leakage of loan-related customer information had occurred. The authorities determined that the matter is serious, as the leak contained sensitive personal credit information related to loans, such as customers' resident registration numbers, annual income, and calculated loan limits.
A Shinhan Bank official stated, "We have confirmed that the personal (credit) information of approximately 25,000 customers was leaked due to abnormal access to certain services from the outside that bypassed authentication." The leaked items disclosed by Shinhan Bank include some customers' Resident Registration Numbers (66 cases) and CI (linked information, 97 cases). Immediately upon recognizing the information leak, Shinhan Bank formed an emergency response team and activated a company-wide emergency response system. Emergency measures to prevent further damage, such as blocking external IPs, suspending related services, and applying new security policies, have been completed, and the bank is closely examining the exact circumstances of the incident and the extent of the damage. You can check whether your data has been leaked on the Shinhan Bank website and the Shinhan Super SOL app.
Shinhan Bank President Jung Sang-hyuk immediately issued an official apology. Through the official website, President Jung stated, "We have confirmed that customer information was recently leaked from some services through abnormal means by an unauthorized external party," adding, "We promise to take full responsibility and fully compensate customers for any losses incurred."
Regarding this incident, some speculate that it may have been caused by a "Credential stuffing" attack technique. Credential stuffing is a hacking method in which an attacker obtains account and password information through some means and then indiscriminately attempts to log in to another site until successful. However, banking services based on login authentication were not hacked. The Financial Supervisory Service conducted an emergency on-site investigation today regarding the leak of Shinhan Bank customer information. The Financial Services Commission (FSC), the Financial Supervisory Service, and the Korea Internet & Security Agency (KISA) held a response meeting this morning to discuss the circumstances of the incident and follow-up measures.
Earlier the previous day, President Lee Jae Myung issued a stern warning regarding the personal information leak, stating, "We will ensure that not only are unbearable fines imposed and severe criminal penalties applied, but civil compensation can also be easily obtained through class action lawsuits." The financial authorities maintain the position that "given the coincidence that Shinhan Bank became aware of the incident on the very same day as President Lee Jae Myung's remarks, the matter cannot be taken lightly."
[email protected] Ye Byeong-jeong Park Mun-su Reporter