South Korea’s state-run Financial Security Institute (FSI) has disclosed a data breach after an attacker accessed the system financial institutions use to submit documents for ongoing security assessments. The incident exposed about 200 administrative forms, roughly 300 pieces of personal data and around 350 records linked to users of the system, according to Yonhap News Agency.
The institute detected unauthorized access at about 3 p.m. on November 9 and blocked the affected system, officials told Yonhap. It also reported the incident to South Korea’s Financial Services Commission and the Korea Internet & Security Agency. The exposed personal information included names and birth dates recorded in administrative forms, while the user-related records were linked to people who accessed the assessment service.
The system is used by financial companies to apply for ongoing information-security assessments and submit supporting documents. It is separate from the systems where banks submit the results of their security-vulnerability assessments. The Asia Business Daily reported that officials believe most of the exposed material consisted of administrative documents and that sensitive personal-credit information and security-vulnerability assessment results were not included in the leak. The institute and authorities are still checking the scope of the incident.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
