The final answer is announced! Sino-Fung Bank: Abnormal transfers were set up for supplier security and were exploited by hackers in a security incident

Sino-Fung Bank: Abnormal transfers were caused by hackers exploiting the security settings of suppliers.

[Reporter Wang Menglun/Report from Taipei] Wing Fung Bank stated today that in response to the abnormal customer transfer incident yesterday (3rd), internal investigation revealed that external hackers took advantage of the supplier's security settings of the new online banking transaction system, resulting in unidentified transfers of funds from customer accounts. At present, the methods in this case have been blocked and verified, a zero-trust mechanism for information security has been implemented and financial security has been strengthened. The information security threat information has been reported to the competent authorities in accordance with regulations and shared with financial peers through F-ISAC to jointly protect financial stability and transaction security.

Sino-Fung Bank emphasized that after receiving the message, it would immediately notify the competent authorities and police units, and activate a third-party security team to identify the problem as quickly as possible, isolate potential threats, and confirm and ensure that the security protection and operation of online banking and other systems are all normal. Customers can rest assured.

The relevant funds were fully returned yesterday. Wing Fung Bank emphasized that it will absolutely protect the rights and interests of customers and assume full responsibility.

The outside world is concerned that the affected customers all have the same ID card number starting with P. After investigation, it was found that the hackers used specific techniques to randomly obtain valid accounts (the first number of the ID card number is the same), and they did not conduct transactions after obtaining the customer's personal information in advance. According to current evidence, there is no leakage of personal information. Wing Fung Bank has initiated information security and personal information inventory to ensure that the information is not leaked.

Wing Fung Bank stated that it has strengthened the monitoring of abnormal transactions. Once a large number of inquiries or abnormal transaction behaviors are discovered in a short period of time, it will immediately warn and block, continue to conduct comprehensive system security inspections, and establish a more complete multi-level protection mechanism.

SinoPac Bank emphasizes that protecting the security of customers’ funds and personal data is the bank’s most basic and important responsibility.

The Bank once again apologizes for the uneasiness and distress caused to customers by this incident. The return of funds is not the end of the incident. Wing Fung Bank emphasized that it will continue to complete investigations, hold accountable and make improvements, and continue to win the trust of customers with concrete actions.