South Korean regulators have confirmed breaches at 16 financial companies from one hacking campaign and estimate about 100,000 items of personal data leaked. They plan to make every firm list its externally connected systems and to spell out how chief executives are held accountable for security.
Perspective Coverage
3 publishers
- Builder
- Builder 22%
- Operator
- Operator 51%
- Investor
- Investor 27%
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence62
South Korea's Financial Services Commission said about 100,000 cases of personal data leaks are presumed across 16 financial institutions. The affected firms are still checking for further breaches, so the figure is an interim count.
Perspective Coverage
3 publishers
- Builder
- Builder 8%
- Operator
- Operator 72%
- Investor
- Investor 20%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence65
Attacker used a DeepSeek-based agent to search Korean finance for WebLogic servers
Korea's Financial Security Institute detected an AI-agent attack on iM Bank on Aug. 28 that used a web shell and leaked no data. The agent's part was reconnaissance, where analysts expect speed and scale to grow.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+15
- Incentives
- Not scored
- Confidence45
Korea weighs size-tiered security rules that would ease network separation first for big banks
Korea is weighing bank security rules tiered by size, under which banks that earned 13.8 trillion won in six months would loosen network separation first. Savings banks, credit unions and community co-ops lost about 99.9 billion won between them, and for them the idea on the table is a pooled security service.
Reality
- Evidence55
- Adoption15
- Hype gap+25
- Incentives60
- Confidence50
South Korea's police added 15 specialists to the team investigating hacks of financial institutions, taking it from 28 to 43 investigators. Because the trail leads to attack servers abroad and the case could be handed to another agency, part of the probe's timing depends on people outside the police.
Perspective Coverage
3 publishers
- Builder
- Builder 25%
- Operator
- Operator 52%
- Investor
- Investor 23%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence64
Hackers took data on 25,000 Shinhan customers through a site built for loan recruiters
South Korea's financial regulator gave lenders until Thursday to check every internet-facing system after hackers breached at least seven banks. Attackers entered through tools built for loan recruiters and staff, so the repair falls on how much credit data banks let outsiders see.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence55
Shinhan Bank exposed data on about 25,000 customers through a loan-broker inquiry platform kept apart from its core banking systems. Yonhap reports AI may have automated the credential stuffing, so the side systems that touch customer data are where lenders' security spending now gets tested.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 49%
- Investor
- Investor 27%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+25
- Incentives50
- Confidence60
Korea's regulator widens its AI security exemption to about 15 more financial firms
Korea's Financial Services Commission is due on the 7th to name about 15 more financial firms exempt from network separation rules, after a first round of 10. Network separation rules are what stop lenders running AI security tools, so the list decides who can use AI against AI-driven hacking.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence50
Korean regulators sent security orders to about 500 financial firms after the same attacker IP turned up in breaches at seven lenders. Almost every firm doing the emergency reviews has no reported breach, so the cost is shared across the sector.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence58
Korean financial firms must shut outside access to the staff and broker pages hackers used
South Korea's Financial Services Commission will block outside access to staff and loan-broker web pages by default after leaks at six firms. Every page a firm keeps reachable now has to be justified as indispensable to services or work.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives
- Not scored
- Confidence50
South Korea's Financial Services Commission ordered banks and card firms to check every externally reachable IT system after data leaks at four banks. The regulator will collect the returns and use them to build new cybersecurity measures for the financial sector.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+10
- Incentives40
- Confidence62