Internal inspection immediately after the hacking incident... There is no known accident damage to date.
Security-related department emergency work system activated... Authorities "Emergency inspection must be completed by the 8th"
(Seoul = Yonhap News) Reporters Go Eun-ji, Kim Yu-ah, and Kim Yu-hyang = In relation to the hacking incident targeting banks and other financial institutions, the securities industry is also continuously checking its security status even on holidays amidst tension.
According to the securities industry on the 5th, there have been no cases of customer information being leaked due to hacking attacks at securities firms to date. It is reported that no unusual incidents related to hacking were found in securities-related institutions such as the Korea Exchange, Koscom, and Korea Securities Depository.
However, as hacking damage continues to occur throughout the financial sector, including major commercial banks, the securities industry is also working hard to strengthen security by completely re-examining related systems internally.
An official from a securities firm said, "Following the hacking incident at a commercial bank, financial authorities have completed blocking and restricting measures by sharing information such as the attacker's Internet address (IP) and attack type with the entire financial industry. We are continuing to monitor whether there are any hacking attempts thereafter."
An official from NH Investment & Securities said, "We checked whether the method used in this hacking attempt was also attempted at our company, and there were no abnormalities. In the case of the IP used in the attack, we have completed blocking measures to prevent access to our company, and we are actively responding to guidance released by financial authorities, etc."
An official from Shinhan Investment & Securities explained, "We first checked for threats of infringement based on the IP of the recent threat attacker, and we are also conducting a self-inspection at the request of the Financial Supervisory Service. We are expanding the installation of vaccines to major systems and services, and are also re-checking authentication vulnerabilities and whether personal information is held in the DMZ section. We are also reviewing vulnerability analysis using artificial intelligence (AI) mock hacking."
KB Securities announced, “We conducted a security inspection based on the Financial Supervisory Service’s inspection checklist and are continuously maintaining a strengthened security control response system.”
According to the financial authorities, the same attacker's IP was found in several places in the breaches of seven companies, including Shinhan, KB Kookmin, Hana, BNK Busan Bank, Yegaram, Welcome Savings Bank, and Hyundai Capital. It is reported that the attacker used AI tools to carry out mass automated attacks targeting multiple financial companies.
The Financial Supervisory Service disseminated attack IPs and security precautions to approximately 500 companies across the financial sector. Banks and credit cards must complete emergency inspections by the 6th, and securities, insurance, savings banks, and electronic finance companies must complete emergency inspections by the 8th.
It must be checked according to a checklist that includes 12 items, including whether attacking IPs are blocked and damage investigated, whether externally exposed information technology (IT) assets and services are identified and security is strengthened, and if any deficiencies are found, they must be immediately supplemented.
Accordingly, even during the three-day holiday from the 3rd to the 5th, the securities company's security-related department went on emergency duty.
A Samsung Securities official emphasized, “We are operating an emergency system during the holiday period,” and “we are thoroughly inspecting the overall security system.”
An official from Mirae Asset Securities also said, "There are no unusual findings as a result of the inspection so far, and we are continuing to defend even during the holidays."
Another securities company official said, "We checked for unusual hacking-related issues just before the holidays, but we are taking a closer look in accordance with the guidelines of the financial authorities. After examining past data and access history, we have not found any traces of infiltration or abnormalities to date, and we are continuously strengthening related monitoring."
Toss Securities said, "We are currently continuously monitoring related trends through 24-hour security control and plan to respond immediately if necessary while closely checking follow-up guidance from relevant organizations such as financial authorities."
An official from Kakao Pay Securities said, "We have reflected the latest infringement indicators in the security system in cooperation with related organizations such as the Financial Security Institute, and are operating by strengthening security control monitoring."
