The Korean Federation of Community Credit Cooperatives (KFCC) has confirmed that information on around 400 insurance customers has been leaked after a hacking attack.
This is the second attack on the federation’s systems in a matter of weeks, with an attack thwarted by its security team last month.
Hackers struck for a second time using a new set of IP addresses on Saturday (10 October), with KFCC confirming a data leak two days later and reporting it to financial authorities yesterday (13 October).
“We sincerely apologize to our members who use the Saemaul Geumgo mutual aid services,” said Lim Jin-woo, credit and mutual aid CEO of the KFCC Central Association, in a notice on the federation’s website. “Although the Central Federation has made every effort to protect customers’ personal (and credit) information, we have become aware of a data breach affecting some customers and are notifying you via our website.”
Lim added that the leaked information varies by individual, and includes customer number, name, date of birth, encrypted resident registration number, account number, account balance, phone numbers, home and work addresses, and email address.
The federation is now notifying customers individually by text if their information is leaked and says it will fully compensate for any customer damage caused by the leak.
Related: Credit unions face up to growing cybercrime threat
“Upon discovering the breach,” said Lim, “the Central Federation blocked the IP addresses used by the hacker and any associated proxy connections, and we have conducted additional security checks and implemented remedial measures to address website vulnerabilities.
“The Central Federation takes this incident very seriously and is committed to the protection of personal (and credit) information. We are reviewing our entire personal (and credit) information protection system and management procedures; we are also strengthening our security systems to ensure such an incident does not happen again.
“We once again sincerely apologise for the concern caused to our mutual aid members and commit to upholding a more responsible approach to protecting personal (and credit) information and safeguarding our members’ rights and interests.”
Authorities suspect the attack IPs originate China, Thailand, and South Korea.
The attack comes against a backdrop of hacking attacks on South Korean financial institutions, many of them using AI. OK Savings Bank detected unauthorised access attempts at the same time as KFCC, and the number of financial firms in the country with confirmed data breaches has risen to 10.
The country’s Financial Services Commission is convening an emergency meeting to review the sector’s security measures.
Image of Saemaul Geumgo branch at Sanbon Station, Gunpo: LandAndTree/Wiki CC
