Information on 400 Saemaeul Geumgo customers leaked... “Full compensation in case of damage” (Comprehensive 2nd report)

(Seoul = Yonhap News) Reporters Bae Young-kyung, Kim Ji-yeon, and Kang Ryu-na = It was confirmed on the 13th that Saemaeul Geumgo and OK Savings Bank had received a hacking attack from the authorities. The information of about 400 customers of Saemaeul Geumgo was leaked, and OK Savings Bank is confirming the damage from the leak.

According to the financial industry, it was confirmed that some personal information, including the names, addresses, and encrypted resident registration numbers of 400 customers, was leaked from Saemaeul Geumgo. The hacking attack took place during the holiday period on the afternoon of the 10th, and a report to the authorities was received that day.

On this day, the Saemaul Geumgo Federation posted an apology on its website in the name of the credit deduction representative director and said, "After recognizing the leak, the Federation blocked the Internet address (IP) accessed by the hacker and the IP through which the bypass was accessed, and additionally inspected and took complementary measures for website vulnerabilities."

Personal (credit) information leaked in this incident varies depending on the individual, but it has been confirmed that customer number, name, encrypted resident registration number, account number, date of birth, mobile phone number, home phone number, work phone number, home address, work address, email address, and balance were leaked.

Customers whose leaks have been confirmed are being individually notified, and we have promised full compensation if any customer damage occurs due to this leak.

The central association emphasized, "We will take this incident seriously and inspect the overall personal (credit) information protection system and management procedures, while doing our best to prevent similar incidents from recurring by strengthening the security system."

Previously, Saemaul Geumgo prevented the leak by blocking abnormal access from overseas IPs, but it was reported that information leakage occurred as it was attacked again from dozens of new IPs.

The IP locations used in the hacking attack were tentatively confirmed to be in three countries: China, Thailand, and Korea.

The connection between the recent hacking attacks using artificial intelligence (AI) agents that have been confirmed one after another in the financial sector has not yet been confirmed. Financial authorities are conducting an investigation with several possibilities in mind.

OK Savings Bank also received a report of a hacking attack, but is investigating whether information was leaked.

The company announced on the 12th that it had detected attempts by unauthorized people to access web pages on its website in advance and reported the 'possibility of information leak' to relevant organizations in accordance with the initial response guidelines.

At the time of detection, the information inquiry system was immediately blocked and emergency response measures were taken, he explained, "Currently, there are no additional abnormal signs or suspicious situations occurring."

He added, "We are conducting a thorough investigation with an external security specialist control company to determine whether the actual information was leaked and the exact circumstances."

Earlier this month, breaches were confirmed at seven companies, including Shinhan, KB Kookmin, Hana, BNK Busan Bank, Yegaram, Welcome Savings Bank, and Hyundai Capital.