Loan Recruiter Page Breached... Shinhan Bank Customer Information Leaked

[Anchor]

Information on some 25,000 customers has been leaked from Shinhan Bank. The leaked data includes names, resident registration numbers, and loan-related information such as annual income. It has been determined that a system used by loan recruiters was hacked.

Reporter Lee Tae-gwon has the details.

[Reporter]

The initial hacking attack on Shinhan Bank's webpage occurred in the early hours of September 29.

The bank stated that it detected the breach at around 9:30 a.m. that same day, but the attacks continued into the following day, leading to a report of the hacking incident to the Financial Supervisory Service at 9:30 a.m. on September 30.

It was determined that customer information for approximately 25,000 Shinhan Bank customers was leaked in this hacking attack.

The leaked data included 66 resident registration numbers, 97 linkage information codes used for online personal identification, and personal credit information such as names, phone numbers, annual incomes, and loan limits.

The initial attack targeted a webpage service used by loan recruiters to check customer loan application information.

This site allowed loan recruiters to log in without a separate certificate by entering their name, resident registration number, and mobile phone number to receive and input a verification code.

It is estimated that the hacker compromised the communication structure of this site to gain access to the service and secure customer numbers.

The hacker then reportedly used the acquired customer numbers to randomly input them into five or six other simple inquiry services, such as internet banking subscription checks, to extract additional information.

[Hwang Seok-jin / Professor, Graduate School of Information Security, Dongguk University : If a financial system were properly designed, personal information should not be retrievable simply by creating and sending a communication message. Verifications regarding who is making the request should have been in place...]

Shinhan Bank posted an apology on its website and stated that it plans to fully compensate customers if any damages are confirmed.

The Financial Supervisory Service has been conducting an emergency on-site inspection of Shinhan Bank since yesterday, September 30, to verify the exact circumstances of the leak and the scale of the damage.

(Camera Reporter: Kim Hak-mo | Video Editor: Kim Jin-won | Designer: Lee Jun-ho)
※ Please note: This article was translated by AI and may contain errors.