INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Prabang Coin Trading Platform Hacked Resulting in 100,000,000 Won Loss

| 2026-10-29 01:17 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach incident involving 16 financial institutions in South Korea has been ongoing for over a month, starting with Shinhan Bank last month. The hacking incidents have affected several major financial institutions including KB Kookmin Bank and Hana Bank, as well as savings banks and capital companies such as Mirae Asset Life Insurance and Daewoo Securities. Bithumb, a virtual asset trading platform, has also been hacked resulting in 100,000,000 won in losses. The attacks target the financial institutions' core trading systems, servers connected to external businesses, and work support systems due to relatively weak security. South Korea's Financial Services Commission found that 130 out of 555 inspected financial institutions had inadequate security management, with approximately 100,000 cases of personal data exposure confirmed so far.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎February 24th
Threat actors used the Hot Wallet to withdraw 100,000,000 won on February 24th.
organisation Hot Wallet
According to financial authorities on the 29th, Bithumb announced on its website that it had detected unusual withdrawals from its Hot Wallet (online wallet) on February 24th, stating that the losses were estimated at 100,000,000 won.
general_metric 100,000,000 won
According to financial authorities on the 29th, Bithumb announced on its website that it had detected unusual withdrawals from its Hot Wallet (online wallet) on February 24th, stating that the losses were estimated at 100,000,000 won.
‎2026/09/29
Threat actors exploited vulnerabilities in the Shinhan Bank system, leading to a hacking incident that resulted in ongoing financial sector incidents, including Prabang's 100,000,000 won loss.
organisation Shinhan Bank
The hacking incidents in the financial sector have been ongoing for over a month, starting with Shinhan Bank last month.
‎2026/10/15
Threat actors exploited vulnerabilities in the financial sector's data security to target 16 South Korean institutions, resulting in a reported loss of 100,000,000 won for Prabang.
target_region Korea, Republic of
South Korea's financial regulatory body announced a data breach incident involving 16 financial institutions last 14 days ago.
tactic Data Breach
South Korea's financial regulatory body announced a data breach incident involving 16 financial institutions last 14 days ago.
general_metric 16 financial institutions
South Korea's financial regulatory body announced a data breach incident involving 16 financial institutions last 14 days ago.
‎2026/10/29
Threat actors used an unknown method to target multiple financial institutions, including Prabang and Shinhan Bank, resulting in a loss of 100,000,000 won.
organisation KB Kookmin Bank
KB Kookmin Bank and Hana Bank, as well as savings banks and capital companies, have also been affected.
organisation Hana Bank
KB Kookmin Bank and Hana Bank, as well as savings banks and capital companies, have also been affected.
organisation Mirae Asset Life Insurance
Recently, Mirae Asset Life Insurance and Daewoo Securities, Mirae Asset Investment & Securities, and virtual asset trading platform Bithumb have also been affected by the hacking incidents.
organisation Mirae Asset Weizmann
Mirae Asset Weizmann reported that 38,490 customers' personal information was exposed, while KB Kookmin Bank's additional investigation revealed that the initial target of 119 individuals had expanded to 2,210 individuals.
organisation KB Kookmin Bank's
Mirae Asset Weizmann reported that 38,490 customers' personal information was exposed, while KB Kookmin Bank's additional investigation revealed that the initial target of 119 individuals had expanded to 2,210 individuals.
victims 38,490 customers
Mirae Asset Weizmann reported that 38,490 customers' personal information was exposed, while KB Kookmin Bank's additional investigation revealed that the initial target of 119 individuals had expanded to 2,210 individuals.
organisation Mirae Asset Weizmann's
Shinhan Bank reported that its external loan promotion customer information inquiry service was targeted, while Mirae Asset Weizmann's server connected to investment consulting firms was also targeted.
organisation The Financial Services Commission
The Financial Services Commission conducted a rapid inspection of 555 financial institutions and found that 130 institutions (23.4%) had inadequate security management.
Tactical Metrics
Metrics
victims
38,490
Customers
Mirae Asset Weizmann reported that 38,490 customers' personal information was exposed, while KB Kookmin Bank's additional investigation revealed that the initial target of 119 individuals had expanded to 2,210 individuals.
Intelligence Sources
Chosun Economy 2026-10-29