Shinhan Bank Suffers Customer Information Leak via Loan Broker Page

[Anchor]

Information on approximately 25,000 Shinhan Bank customers has been leaked. The leaked data includes names, resident registration numbers, and loan-related details such as annual income. It has been determined that the system used by loan brokers was hacked.

Reporter Lee Tae-gwon has the details.

[Reporter]

The initial hacking attack targeting a Shinhan Bank webpage took place in the early hours of September 29.

The bank stated that it detected the breach around 9:30 a.m. that same day, but the attacks continued until the following day. Ultimately, the bank reported the hacking damage to the Financial Supervisory Service at 9:30 a.m. on September 30.

It was determined that customer information for about 25,000 Shinhan Bank customers was leaked in this hacking attack.

The leaked data included 66 resident registration numbers, 97 connection information data used to identify individuals online, and personal credit information such as names, phone numbers, annual income, and loan limits.

The point of the initial attack was a webpage for viewing customer loan application information used by loan brokers.

This service allowed loan brokers to access it by entering their name, resident registration number, and mobile phone number without a separate certificate, using a verification code sent to them.

It is estimated that the hacker hacked the communication structure of this location to access the service and secured customer numbers.

The hacker appears to have used the secured customer numbers to randomly input them into five or six other simple inquiry services, such as internet banking subscription inquiries, to extract additional information.

[Hwang Seok-jin / Professor, Graduate School of Information Security, Dongguk University : If it were a properly designed financial system, personal information inquiry should not be possible just by creating and sending communication telegrams. Verification should have been performed based on aspects such as who is making the request....]

Shinhan Bank posted an apology on its website and stated that it plans to fully compensate customers if damages are confirmed.

The Financial Supervisory Service has been conducting an emergency on-site inspection of Shinhan Bank starting September 30 to verify the circumstances of the leak and the scale of the damage.

(Camera Reporter: Kim Hak-mo, Video Editor: Kim Jin-won, Designer: JUNHO)
※ Please note: This article was translated by AI and may contain errors.