Hackers hit Korea’s Financial Security Institute, accessing info for financial institutions

A cyberattack targeting Korea's Financial Security Institute (FSI) has led to the unauthorized exposure of personal data belonging to employees of financial institutions. The breach, which occurred on Monday, prompted the institute to immediately suspend access to its systems. In response, the Financial Services Commission (FSC), the sector's top regulator, along with other relevant agencies, has initiated an investigation into the extent of the damage.

The targeted system, responsible for continuous security assessments, was in the process of notifying member entities about the institute's services. Post-attack, the system displayed a message indicating temporary unavailability due to website maintenance.

The leaked data primarily comprises information from applications for financial services and related administrative documents. This includes names, phone numbers, and email addresses of individuals listed in these documents, with some personal details obscured. Government authorities are currently in the process of confirming the exact number of records compromised.

The Financial Security Institute, a government agency tasked with ensuring cybersecurity for the financial sector, maintains that sensitive data regarding the security vulnerabilities of institutions were not disclosed. An official from the Financial Services Commission stated, "The system was never intended to handle such information. No sensitive data, such as the weaknesses of financial institutions, was leaked."

Despite this assurance, the breach could have significant consequences for the FSI. The agency's failure to prevent the attack has raised questions about its reliability. Consequently, the FSC has ordered a thorough review of all the institute's systems to prevent similar incidents in the future. Questions or comments regarding this matter may be directed to english@hani.co.kr.