FSI faces scrutiny over lax website security after data breach - 매일경제
South Korea's Financial Security Institute (FSI) experienced a data breach Monday that exposed about 850 records, including personal information of employees at 48 financial companies and administrative documents.
The breach occurred at the FSI's continuous assessment support system, a website that collects documents from financial companies for regulatory assessments. The exposed data included about 300 records containing names and dates of birth of employees at 48 financial firms, 350 records of masked system user information, and 200 administrative documents including consent forms for personal credit information.
Hackers' Method
According to the FSI, hackers accessed the system using fraudulent accounts while impersonating the Financial Supervisory Service. The institute confirmed that no security-sensitive information such as financial companies' system architecture diagrams or sensitive personal data including resident registration numbers was compromised.
Ongoing Investigation
Financial authorities launched an on-site investigation Wednesday to determine the full extent of the breach and how it occurred. The incident has raised concerns over the institute's ability to protect the financial sector from cyber threats.
The investigation has also brought scrutiny to the institute's oversight of its other websites. A report on the Financial Services Commission's comprehensive audit of the FSI last year identified security vulnerabilities in its RegTech Portal, where unauthorized users could access certain pages.
The FSC had urged the institute to inspect its other websites to ensure similar vulnerabilities did not exist. The FSI now faces increased pressure to address these security concerns across its platforms.
Related
