Financial Security Institute Suffers Data Breach, Over 850 Records Leaked - THE ELEC, Korea Electronics Industry Media
South Korea's Financial Security Institute (FSI) suffered a data breach exposing over 850 records, including personal information, after unauthorized access was detected on November 9.
The breach was detected at approximately 3 p.m. on November 9 during internal security monitoring. FSI immediately blocked access to the compromised system and implemented emergency security measures, reporting the incident to both the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA).
Exposed Information
Approximately 850 records were extracted, including around 200 administrative forms, more than 300 personal information records, and over 350 system user records. The user information contained names, mobile phone numbers, and email addresses, though names and mobile phone numbers had been masked.
We are conducting a detailed investigation into the cause of the incident and the extent of the damage, so the number of affected records may change.
Limited Impact
FSI confirmed that the leaked information did not include sensitive data such as financial institutions' system architecture diagrams, resident registration numbers, or personal credit information. The extracted materials consisted mainly of administrative forms, including records of promotional event information transmissions and consent forms.
Response and Next Steps
As a specialized financial security institution, we are expected to maintain the highest standards of security and trust. We sincerely apologize for causing concern to financial institutions and the public through this incident.
The affected system, which has been temporarily suspended, does not collect security-related information or process financial transactions for ordinary banking customers. FSI has notified concerned financial institutions and plans to inform individuals whose information was exposed about preventive measures against secondary damage.
Related
