Savings Banks and Capital Firms Hit Too... Hacking Damage Spreads Across Entire Financial Sector

[Anchor]

Following four commercial banks, secondary financial sectors such as savings banks and capital firms have also suffered personal information leaks due to hacking. The attacks are presumed to have utilized artificial intelligence, and the damage is expanding across the entire financial sector.

Reporter Lee Hyun-jung has the details.

[Reporter]

Hyundai Capital announced that personal information of 146 mortgage loan recruiters was leaked due to a hacking attack on its recruiter inquiry page.

Names, mobile phone numbers, and resident registration numbers were leaked.

An official from Hyundai Capital explained, "While checking an overseas IP that hacked Shinhan Bank, which was shared by financial authorities, we discovered that the page in question was attacked on September 27." The official added, "We immediately blocked the IP and the page and formed a dedicated task force for incident response."

Yegaram Savings Bank also stated, "We confirmed circumstances where an unidentified hacker accessed a server containing customer personal information on September 30, resulting in a leak."

It is estimated that the personal information of about 40,000 customers, including names, dates of birth, and contact information, has been leaked.

It was determined that no access or attacks were made on the internal system.

Previously, personal information leaks due to hacking occurred at Shinhan, KB Kookmin, Hana, and BNK Busan Bank.

Woori and NH Nonghyup Bank also experienced hacking attempts, but no damage has been identified so far.

According to an internal analysis report by Woori Bank obtained by SBS, 9 access histories from 3 suspicious IP addresses were confirmed, but the damage was prevented by blocking them with a firewall.

It has been confirmed that hacking occurred using common IPs across multiple financial institutions, and experts view these as attacks utilizing artificial intelligence.

[Hwang Seok-jin / Professor, Dongguk University Graduate School of International Information Security: (It is presumed that) they scanned for vulnerabilities, attempted authentication using stolen or leaked account information, and then utilized loopholes in identity verification or access control to access systems as if they were legitimate users.]

As the damage spreads, the Financial Services Commission decided to convene an emergency inspection meeting at the Seoul Government Complex, summoning the heads of associations across all financial sectors and the CEOs of the financial companies where the incidents occurred.

(Photo: Yonhap News) Reportedly by Lee Chan-su | Video by Park Ji-in | Graphics by Kang Yoon-jung
※ Please note: This article was translated by AI and may contain errors.