INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Korea Savings Bank customer data leaked to 16 financial institutions

| 2026-10-16 01:16 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A capital in South Korea has leaked the personal data of eight hundred forty-eight customers, including names, resident registration numbers, and dates of birth. Shinhan Bank's Director-General Shin Jin-chang chaired a meeting with relevant institutions to identify 16 cases of data breaches, which includes the OK Bank incident. The attack began at 8:44 pm on October 11th and ended at 2:14 am on the 12th, after an unauthorized access was detected at 10 am on the 12th. The leaked items included name, date of birth, mobile phone number, account number, address, email, workplace name, business registration number, annual income, and loan amount related information. The attack worked by accessing the login route without normal authentication and randomly inputting values to secure the customer's ID, then retrieving additional contact information and other relevant information. Currently, there have been 16 financial institutions affected by cyber attacks, including banks, savings banks, and capital markets, with a total of approximately 100,000 leaked information cases reported as of October 14th.
Technical Mitigations AI-generated
• Regularly monitor and patch the 'Msinhan' mobile website used by loan applicants to view the status of their loan processing. • Implement robust authentication bypass detection techniques for external attacks on financial institutions' systems, such as those that exploit login routes without normal authentication. • Use IP address blocking and monitoring tools to detect and prevent unauthorized access attempts from known malicious actors.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎September 27th
Threat actors used an unspecified method to target Hyundai Capital on September 27th, resulting in the leak of personal information from 146 loan solicitation individuals.
tactic Data Breach
Shinhan Bank has reported a data breach on September 27th, where corporate customer information was leaked.
Hyundai Capital has reported a data breach on September 27th, where the personal information of 146 loan solicitation individuals was leaked.
organisation Hyundai Capital
Hyundai Capital has reported a data breach on September 27th, where the personal information of 146 loan solicitation individuals was leaked.
general_metric 146 solicitation individuals
Hyundai Capital has reported a data breach on September 27th, where the personal information of 146 loan solicitation individuals was leaked.
‎September 30th
A hacker with unknown identity accessed the server where customer personal information was stored at Yagaram Savings Bank on September 30th.
‎October 10th
Threat actors used an IP address to target DB Savings Bank on October 10th, resulting in the leak of customer information and employee data.
tactic Data Breach
DB Savings Bank reported a data breach on October 10th, where the information of 100+ employees was leaked.
organisation DB Savings Bank
DB Savings Bank reported a data breach on October 10th, where the information of 100+ employees was leaked.
victims 100 employees
DB Savings Bank reported a data breach on October 10th, where the information of 100+ employees was leaked.
organisation the Financial Security Institute
The company was hacked on October 10th and, based on the IP address shared by the Financial Security Institute on December 12th, it was confirmed that the company was indeed the target of the attack.
‎October 15th
Threat actors used a cyber attack to leak the information of 67 Korea Savings Bank customers, initially affecting 183 customers.
victims 183 initial customers
The bank stated that the initial 183 customers' information was leaked, but after a thorough investigation with two external security monitoring companies, the number of affected customers increased to 67, as of October 15th.
‎2026/10/16
Threat actors used unknown methods to target multiple financial institutions in South Korea, resulting in the disclosure of approximately 100,000 cases of personal information.
organisation Bank
Currently, there have been 16 financial institutions, including banks, savings banks, and capital markets, affected by cyber attacks.. OK Bank has confirmed that a customer data leak occurred after a customer applied for a loan on its website.
organisation The Financial Services Commission
The Financial Services Commission announced on the 14th that it had held a meeting with the relevant institutions, chaired by Shinhan Bank's Director-General Shin Jin-chang, and identified 16 cases of data breaches, including the OK Bank incident.
organisation Shinhan Bank's
The Financial Services Commission announced on the 14th that it had held a meeting with the relevant institutions, chaired by Shinhan Bank's Director-General Shin Jin-chang, and identified 16 cases of data breaches, including the OK Bank incident.
organisation the OK Bank
The Financial Services Commission announced on the 14th that it had held a meeting with the relevant institutions, chaired by Shinhan Bank's Director-General Shin Jin-chang, and identified 16 cases of data breaches, including the OK Bank incident.
organisation Shinhan Bank
Shinhan Bank has suffered a data breach involving approximately twenty-five thousand customers' information.
organisation KB Kookmin Bank
KB Kookmin Bank has also suffered a data breach, involving one hundred and ninety-nine customers and twenty employees, totaling one hundred and nineteen personal information records.
organisation Korea Savings Bank
Korea Savings Bank customer information leak involving 250 customers is reported.
victims 250 customers
Korea Savings Bank customer information leak involving 250 customers is reported.
organisation the Financial Supervisory Service
The bank detected unauthorized access to its loan application webpage at 10 am on the 12th and reported it to the Financial Supervisory Service on the 13th.
organisation IP
The bank blocked related systems and IP addresses, and notified individual customers about the incident.
organisation OK Bank
The total number of leaked information cases was approximately 100,000, as of the 14th, which is different from the 15th announcement by OK Bank.
organisation Hana Bank
Hana Bank has reported a security breach in its operational support system (ODS) where an unauthorized external user gained unauthorized access, resulting in the disclosure of 89 customers' personal information.
organisation ODS
Hana Bank has reported a security breach in its operational support system (ODS) where an unauthorized external user gained unauthorized access, resulting in the disclosure of 89 customers' personal information.
victims 89 customers
Hana Bank has reported a security breach in its operational support system (ODS) where an unauthorized external user gained unauthorized access, resulting in the disclosure of 89 customers' personal information.
organisation BNK Busan Bank
BNK Busan Bank has reported a security breach in its mobile operational support system due to an external attack, resulting in the disclosure of information of 11 outsourced development employees.
victims 11 outsourced development employees
BNK Busan Bank has reported a security breach in its mobile operational support system due to an external attack, resulting in the disclosure of information of 11 outsourced development employees.
organisation Yagaram Savings Bank
Yagaram Savings Bank, approximately 50,000 cases estimated...
organisation OK Savings Bank
Welcome Corporation customer information disclosure OK Savings Bank, excluding Yagaram Welcome DB Savings Bank, has also confirmed a security breach.
organisation Yagaram Welcome DB Savings Bank
Welcome Corporation customer information disclosure OK Savings Bank, excluding Yagaram Welcome DB Savings Bank, has also confirmed a security breach.
data_breach 97 related information records
The leaked data included names, phone numbers, annual income, and loan limits, as well as sixty-six resident registration numbers and 97 related information records linked to the customers.
‎December 12th
Threat actors used an IP address shared by the Financial Security Institute to target Korea Savings Bank on October 10th.
organisation the Financial Security Institute
The company was hacked on October 10th and, based on the IP address shared by the Financial Security Institute on December 12th, it was confirmed that the company was indeed the target of the attack.
Tactical Metrics
Metrics
victims
100
Employees
DB Savings Bank reported a data breach on October 10th, where the information of 100+ employees was leaked.
Metrics
victims
250
Customers
Korea Savings Bank customer information leak involving 250 customers is reported.
Metrics
victims
183
Initial Customers
The bank stated that the initial 183 customers' information was leaked, but after a thorough investigation with two external security monitoring companies, the number of affected customers increased to 67, as of October 15th.
Metrics
victims
89
Customers
Hana Bank has reported a security breach in its operational support system (ODS) where an unauthorized external user gained unauthorized access, resulting in the disclosure of 89 customers' personal information.
Metrics
victims
11
Outsourced Development Employees
BNK Busan Bank has reported a security breach in its mobile operational support system due to an external attack, resulting in the disclosure of information of 11 outsourced development employees.
Metrics
data_breach
97
Related Information Records
The leaked data included names, phone numbers, annual income, and loan limits, as well as sixty-six resident registration numbers and 97 related information records linked to the customers.
Intelligence Sources
Dailysecu 2026-10-16