South Korean government agency for internet security and incident response.
Citibank and Bank of America each have about 3,400 dedicated cybersecurity staff, 34 to 47 times the headcount at Korea's four largest banks. Scaled for the 10-to-12-fold asset gap, the lead is 2.8 to 4.7 times on staff and 1.8 to 3.7 times on spending.
Reality
Malgnsoft, an online training vendor, lost data on about 5,000 Kia union members in a hack that reached about 20 of its client organizations. One of those clients is the defense ministry, so a car-plant union's risk depended on who else kept records with the same vendor.
Reality
President Lee Jae-myung ordered a full probe of hacks that exposed data at four Korean banks, including about 25,000 Shinhan Bank customers. The response runs through every financial industry association before the probe has shown whether the banks share a weak point.
Perspective Coverage
5 publishersReality
Korea's National Police Agency booked the AI-driven attack on Shinhan Bank as a criminal case and assigned 28 cyberterrorism investigators to it. Whether the case moves to the new Serious Crimes Investigation Agency turns on how the Financial Services Commission classifies the bank's system.
Reality
Korea's 79 savings banks serve 10.17 million clients, while Shinhan Savings Bank and Welcome Savings Bank each run security with fewer than eight staff. Both already give security a commercial bank's share of IT spending, and industry officials say the harder shortage to fix is people.
Reality
Korea's Financial Services Commission is due on the 7th to name about 15 more financial firms exempt from network separation rules, after a first round of 10. Network separation rules are what stop lenders running AI security tools, so the list decides who can use AI against AI-driven hacking.
Reality
Korea's Financial Services Commission ordered a sector-wide security review after suspected AI-agent hackers hit the country's five largest banks. The three biggest leaks ran through employee, sales and broker tools, so the review's cost lands on systems customers never see.
Reality
FSC chairman Lee Eok-won told Korean financial firms they will be held strictly accountable under law if the hacks that hit six lenders happen again. The threat covers future breaches, so for the firms already hit the cost so far is five requests, including security checks and customer compensation.
Reality
South Korea's Financial Services Commission ordered banks and card firms to check every externally reachable IT system after data leaks at four banks. The regulator will collect the returns and use them to build new cybersecurity measures for the financial sector.
Reality