On July 3, the bank announced in a customer notice that the breach occurred when an external development company inadvertently leaked personal information that it had been improperly storing. The leaked data includes encrypted information known as connection information (CI) and customer nicknames. However, sensitive personal data such as phone numbers, resident registration numbers, and addresses were not compromised.
The information was provided to the external developer as part of a project to establish an NFT platform, which is set to be completed in September 2024. After the project concluded, Woori Bank received a certificate confirming the destruction of the data. However, an employee of the contractor retained the information and shared it on a developer platform, leading to the breach.
Woori Bank stated, "Upon discovering the breach on June 30, we immediately blocked access to the relevant information through the development company and reported the incident to the Personal Information Protection Commission, as well as notifying the public on our website." The bank added that, to date, there have been no reports of the leaked information being disseminated or misused online or offline.
The bank explained that the leaked CI and user nicknames cannot be used to identify individuals unless combined with other information. Nevertheless, Woori Bank has advised affected customers to be cautious of unsolicited phone calls or text messages and to avoid clicking on suspicious URLs. Additionally, the bank has implemented a Financial Transaction Monitoring System (FDS) to closely monitor for any unusual transactions, and it plans to provide compensation if any further harm is confirmed.
Woori Bank concluded by stating, "We will strengthen our management practices by conducting a comprehensive investigation into the personal information management status of the development company, and we will respond promptly to any customer harm that may arise from this incident."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.