Yegaram Savings Bank Downplayed Data Leak of Resident Registration Numbers and Addresses

[Anchor]

We now turn to breaking news on the financial sector hacking. It has been confirmed that Yegaram Savings Bank, which suffered the most damage in this recent cyberattack, downplayed the scale of the breach in its public disclosures. Even after customers' resident registration numbers and home addresses were completely compromised, the bank acted as if nothing had happened.

Choi Seung-hun reports exclusively.

[Reporter]

This is the personal data breach notice that Yegaram Savings Bank has posted on its website under the name of its CEO continuously since October 2.

The notice explicitly states that only customers' names, dates of birth, and contact information were leaked in the hacking incident.

However, on October 3, the day after posting this notice, the bank filed a completely different report with the Personal Information Protection Commission.

It confessed that the account numbers, home addresses, and even resident registration numbers of over 50,000 customers had been stolen.

This effectively means the bank admitted the full extent of the damage only to the regulatory authority with the power to sanction them, while keeping its customers in the dark for a full week.

When reporting began, the bank explained that some items might have been omitted during the rush to issue the public notice, adding that it would look into the specific circumstances.

Meanwhile, a man in his 20s from China, whom a U.S. cybersecurity firm pointed to as a possible attacker behind the financial sector hacking incident, admitted to SBS reporting staff that he had served as an administrator in a clandestine Telegram chat room where hackers shared attack methods and information.

However, he claimed that he only expelled fraud users and had never directly participated in hacking or DDoS attacks.

[Hwang Seok-jin / Professor, Graduate School of Information Security, Dongguk University : To assert his innocence, he provided his mobile phone and actively participated in forensics, so we need to verify whether his claims are actually true or not.]

It was learned that the police have also secured and are reviewing server-related logs analyzed by the cybersecurity firm.

The police stated that they have expanded the investigation team from 28 to 43 members and are tracking the attackers in cooperation with overseas agencies.

(Photo: Yonhap News)
Reported by Choi Seung-hun | Video by Park Hyun-chul | Video Editing by So Ji-hye | Design by Choi Jae-young and Kim Han-gil | Data courtesy of the office of Representative Kim Hyung-yeon
※ Please note: This article was translated by AI and may contain errors.