Koreajoongangdaily Korean Financial Institutions Face Data Leaks Amid Rising Cyberattacks
Article Content
- •KFCC confirmed a data leak affecting 400 customers after a hacking attack on October 10.
- •A total of 100,000 cases of leaked personal information have been reported across 16 financial institutions.
- •The Financial Services Commission is investigating and enhancing security measures in response to the rising cyber threats.
The Korean Federation of Community Credit Cooperatives (KFCC) confirmed a data leak affecting around 400 customers after a hacking attack on October 10, 2026. This incident follows a thwarted attack in September and is part of a broader trend, with 16 financial institutions reporting a total of 100,000 cases of leaked personal information. The leaked data includes customer names, birth dates, account numbers, and contact information. The Financial Services Commission (FSC) is investigating the incidents, which are suspected to involve IP addresses traced back to China, Thailand, and South Korea. KFCC has blocked the attack IPs and is enhancing security measures. The FSC is holding an emergency meeting to assess the security of the financial sector. Authorities have noted a rise in cyberattacks on South Korean financial institutions, many of which are reportedly linked to AI tools.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track KB Kookmin Bank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of data were leaked?
How many institutions are affected?
What actions are being taken by authorities?
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…