Science & Tech · Cybersecurity · 9 hrs ago
Hack exposes personal data of more than 400 Saemaul Geumgo members
Hackers accessed Saemaul Geumgo’s insurance service on Oct.
10, exposing personal information belonging to more than 400 members.
Saemaul Geumgo is a South Korean credit union, and the affected service provides insurance-like mutual aid.
Exposed data included names, account numbers and balances, as well as addresses, contact details and encrypted resident registration numbers.
The organization said the number affected could rise as it investigates the breach.
It blocked the attackers and strengthened the website’s security after discovering the leak on Oct.
12.
Saemaul Geumgo reported the incident to authorities and is contacting affected members by text message.
It says it will fully compensate customers for any losses caused by the leak and will review its data protection measures.
A hack exposed personal information belonging to more than 400 Saemaul Geumgo insurance members.
The leaked data included names, account numbers, encrypted resident registration numbers, contact details, addresses and account balances.
Saemaul Geumgo said the attack took place on October 10 and that it identified the breach on October 12.
The cooperative said it blocked the attacking and proxy IP addresses, checked website vulnerabilities and strengthened security.
It reported the incident to authorities and said it was investigating the scope and circumstances of the leak.
- Who
- More than 400 Saemaul Geumgo insurance members had personal information exposed.
- What
- A hack exposed personal and financial information, including account numbers and balances.
- When
- The attack occurred on October 10, and the breach was identified on October 12. The incident was reported on October 13.
- Where
- Saemaul Geumgo’s insurance service website.
- Why
- The cooperative believes the attacker exploited a vulnerability in the website.
This story does not have two clearly opposing sides.
The attack on the Saemaul Geumgo insurance website took place, according to the central association.
The central association said it became aware of the breach.
The central association reported the attack and damage to the Korea Internet & Security Agency and relevant authorities.
- Affected members
- More than 400
- Attack date
- October 10, 2026
- Data exposed
- Names, account numbers, encrypted resident registration numbers, contact details, addresses and balances
- Reported to
- Korea Internet & Security Agency and relevant authorities
- Reported IP locations
- South Korea, China and Thailand
What people are saying
The number of members whose information has been exposed so far is in the 400s, but it could increase.
We take this incident seriously and will review the entire personal credit information protection system and management procedures.
Sources
Related news
Cyberattack disrupts IT systems at three TFG London fashion brands
Cyberattack disrupts refrigeration at hundreds of French supermarkets
Norway fines Microsoft-owned Xandr $9.6 million over Grindr data sharing
GitLab fixes maximum-severity flaw that could let attackers run server code
DDoS attack disrupts Canonical websites for more than four hours
Ledger links CryptoBilis wallet implants to confirmed crypto thefts
GitHub adds 48-hour limit after npm publishing flaw exposed 1,500 packages
Survey finds human error is the leading cybersecurity concern
Ahold Delhaize takes systems offline after cybersecurity incident
Vercel Sandbox flaw could let AI agents leak sensitive data, researchers say
Cyberattacks target refrigeration systems at more French supermarkets
