Archive · 4 Oct 2026
South Korean President Orders Probe Into Financial Data Leaks
South Korea has had several cyberattacks involving banks and other public institutions.
President Lee Jae Myung told officials to investigate carefully and work out ways to respond.
Shinhan Bank said information about around 25,000 customers had been leaked, and Hana Bank reported leaks involving 89 customers.
Some other banks were attacked but blocked access before customer information was taken.
Regulators told financial institutions to check their security and make it harder for outsiders to enter their systems.
They also plan to share information about cyber threats more quickly.
Officials said artificial intelligence might have been used, but they have not confirmed that.
An opposition party asked investigators to consider whether North Korea was involved, but that has not been established.
President Lee Jae Myung ordered a thorough investigation and response measures after personal data leaks affected financial and public institutions.
Shinhan Bank reported that information on about 25,000 customers was leaked; Hana Bank reported leaks involving 89 customers.
Reports also named KB Kookmin Bank among institutions reporting attacks; Woori Bank and NH Nonghyup Bank blocked attempted access without personal information being leaked.
Financial regulators ordered security inspections, tighter access controls, reduced external system access and faster sharing of threat information.
Officials said AI use could not be ruled out; the People Power Party urged investigation of possible North Korean involvement, which remains unconfirmed.
- Who
- President Lee Jae Myung, South Korean financial regulators and affected financial institutions.
- What
- A government investigation and cybersecurity response to reported personal data leaks and hacking attempts.
- When
- The president's order and emergency meeting were reported on Sunday; Shinhan Bank reported a breach on September 30.
- Where
- South Korea.
- Why
- To investigate the reported leaks and attacks and strengthen cybersecurity and consumer protections.
Reported official position
Opposition party's concern
Possible North Korean involvement
Reported official position
Authorities were investigating the incidents, and the reports did not identify a confirmed perpetrator.
Opposition party's concern
The People Power Party said authorities should investigate possible North Korean involvement, citing past cyberattacks attributed to Pyongyang against South Korean financial institutions.
- Presidential direction
- Lee Jae Myung ordered a thorough investigation and response measures.
- Shinhan Bank leak
- About 25,000 customers' personal information was reported leaked, including names, phone numbers and annual income.
- Hana Bank leak
- Personal information belonging to 89 customers was reported leaked.
- Other institutions
- KB Kookmin Bank was named among institutions reporting attacks; Woori Bank and NH Nonghyup Bank blocked attempts without reported personal information leaks.
- Regulatory measures
- Institutions were directed to inspect security, tighten access controls, minimize external system access and strengthen consumer protections.
- Threat sharing
- Regulators said attack methods, IP addresses and other threat information would be shared across the industry.
- Potential perpetrators
- The People Power Party called for investigation of possible North Korean involvement; no responsibility was confirmed in the reports.
Sources
South Korean president orders probe into data leaks across financial industry
South Korean president orders probe into data leaks across financial industry
Lee calls for thorough probe into personal data leaks at financial institutions