INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Financial Authority Information Leaked in Voice Phishing Attack

| 2026-10-08 12:17 CRITICAL LOW DATA BREACH PHISHING & SOCIAL ENGINEERING
JSON
Executive Summary
AI-generated
A recent incident of personal data leaks at domestic financial institutions has led to concerns about 2nd financial scams, such as voice phishing and smishing, exploiting the leaked information. As of October 6, there were no confirmed cases of customer funds being leaked due to the leak, but regulatory bodies have warned that scammers can access victims' names, incomes, and loan information with precision, making it easy to mistake contact information for a real financial institution employee. The attack works by sending text messages claiming to offer special loans or interest rate reductions, convincing victims to click on URLs or deposit money into their accounts, potentially leading to the theft of personal information stored on mobile devices or hijacked financial transactions. Currently, there is no confirmed status update on the incident's resolution, but authorities recommend using preventive measures such as blocking loan applications and account openings through services like 'Financial Transaction Anxiety Prevention Service'.
Technical Mitigations AI-generated
• Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Restrict Web-Based Content (ATT&CK mitigation for Phishing): Determine if certain websites or attachment types (ex: .scr, .exe, .pif, .cpl, etc.) that can be used for phishing are necessary for business operations and consider bloc • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance
Incident Timeline
‎October 6
Regulatory bodies warned on October 6 that leaked personal data from a voice phishing incident did not include passwords or one-time passwords.
organisation OTP
The regulatory bodies have warned that, based on the consumer alert issued on October 6, the leaked personal data has not included passwords and one-time passwords (OTP), but the risk of customized scams using leaked personal information remains.
‎October 6 to one month
A financial regulatory agency designated a Special Response Period for Personal Information Leaks from October 6 to one month, requiring financial institutions to operate dedicated counseling channels and strengthen the detection of suspicious transactions.
‎2026/10/08
Threat actors used voice phishing to target individuals, potentially exploiting leaked financial information.
organisation Financial Authority Information Leaks Used
"Access to my loan information...Financial Authority Information Leaks Used in Voice Phishing Alert".
organisation The Financial Services Commission
The Financial Services Commission and the Financial Supervisory Service have issued a consumer alert, urging consumers to be cautious of 2nd financial scams, particularly those involving financial institutions suspected of leaking personal data.
organisation the Financial Supervisory Service
The Financial Services Commission and the Financial Supervisory Service have issued a consumer alert, urging consumers to be cautious of 2nd financial scams, particularly those involving financial institutions suspected of leaking personal data.
organisation Loan Anxiety Prevention Service'
The service offers three options: 'Loan Anxiety Prevention Service', 'Non-Face-to-Face Account Opening Anxiety Prevention Service', and 'Open Banking Anxiety Prevention Service'.
organisation payinfo.or.kr
Financial institutions' branches can be visited, or the 'Naegyejwahannune' (payinfo.or.kr) service of financial transaction centers, or the bank app can be used to apply.
organisation The Financial Supervisory Service's
The Financial Supervisory Service's 'Personal Information Exposure Prevention System' on its 'Personal Information Portal' (fine.fss.or.kr) also helps individuals register their own information, which can limit new account openings or credit card issuances in the name of the individual.
organisation the Korea Communications Commission Authority
In cases where the loss is suspected, the Korea Communications Commission Authority (1394) can provide counseling.
organisation Commission
However, given the inability to rule out additional potential losses, the Commission urged customers to refrain from responding to suspicious contacts and instead verify the facts through official financial institution channels.
Intelligence Sources
Dailysecu 2026-10-08