Yeogaram Savings Bank: Personal information of 43,246 people leaked... “Became aware 14 days after hack”

[Financial News] Yeogaram Savings Bank became aware of the possibility of a personal information leak only 14 days after a cyberattacker (hacker) accessed its server. The final confirmed number of customers affected was 43,246; for some, resident registration numbers, account numbers and transaction histories were also leaked.
According to the financial industry on the 16th, Yeogaram Savings Bank announced that the personal information of 43,246 customers had been leaked in a “Notice of Personal Information Leak and Apology” issued that day. 
Of these, 42,926 customers had basic personal information, such as names, dates of birth and contact details, leaked, accounting for 99.3% of the total. The remaining 320 were found to have had additional sensitive information, including resident registration numbers, account numbers, transaction histories and passport numbers, leaked.
The leaked information included names, dates of birth, contact details (mobile phone numbers), resident registration numbers, account numbers, transaction histories, dates of issuance and expiration, passport numbers, addresses, driver’s license numbers, alien registration cards, workplace names and dates of joining. The specific information leaked varied by customer.   
The hacker accessed the server containing customers’ personal information on the 16th of last month. Yeogaram Savings Bank became aware of the possibility of a personal information leak on the 30th of the same month. In other words, it took 14 days after the hacker’s access for the bank to become aware of it. 
Immediately after becoming aware of the incident, Yeogaram Savings Bank took emergency measures, including suspending the relevant services and blocking external Internet Protocol (IP) addresses, and strengthened security monitoring. It has now completed measures to prevent a recurrence and plans to check whether customers have been affected and support them through the redress process via its customer service center.
No secondary harm resulting from the incident has been confirmed. Yeogaram Savings Bank plans to provide appropriate compensation if customer harm is confirmed. Anyone who suffers losses from this leak can seek redress through claims for damages or applications for dispute mediation. 
In its apology, Yeogaram Savings Bank urged customers to “avoid clicking on links from unclear sources or responding to requests to enter personal credit information, in preparation for the possibility of smishing or phishing that exploits the leaked information.”
The final number of people affected by the leak was lower than the approximately 50,000 reported earlier. Yeogaram Savings Bank explained, “The previous figure was an estimate made to prevent secondary harm; further investigation allowed us to determine more specifically who was affected and the scope of the leak.”
Moon Yun-seok, CEO of Yeogaram Savings Bank, said, “We promise to respond to this personal information leak responsibly through to the end, doing our utmost to support recovery from the harm and prevent a recurrence.” 
Meanwhile, on the 13th, the Financial Supervisory Service began an on-site inspection of Yeogaram Savings Bank. 
[email protected] Lee Hyun-jung Reporter