Scammers Exploit Leaked Loan Information, Raising Concerns Over Targeted Phishing

Recent hacking incidents in the financial sector have raised concerns about secondary damages, such as voice phishing, stemming from leaked personal and loan information. Scammers, armed with details like names, contact information, income, and loan limits, can impersonate bank employees or loan consultants, prompting a call for heightened vigilance among financial institutions and consumers.

According to the financial sector on October 5, seven financial institutions, including banks, savings banks, and capital companies, have confirmed data breaches due to external attacks. Additionally, two online investment-linked financial companies reported separate breaches.

The leaked information varies by institution and includes names, phone numbers, and resident registration numbers. Some banks and online investment firms also had annual income, loan limits, addresses, and employer names compromised. While financial authorities have not confirmed any direct misuse of the leaked information for fraudulent transactions, they emphasize that the potential for voice phishing and smishing cannot be ruled out.

Particularly concerning is the risk that loan-related information could be used in impersonation schemes, leading consumers to mistakenly believe they are receiving legitimate guidance from financial institutions. Scammers could exploit their knowledge of personal income or loan limits to gain trust. Even if the leaked information is not immediately used for fraudulent transactions, it could serve as a tool for financial scams that request additional information or prompt money transfers.

There have been past instances where leaked loan information was misused for financial fraud. In 2014, customer data leaked from Citibank Korea fell into the hands of voice phishing organizations, which used the information on loan amounts, interest rates, and due dates to target high-interest loan users. They impersonated banks or community support centers, claiming they could facilitate low-interest loan conversions.

In light of this incident, it is crucial to be cautious of contacts that offer loan consultations or refinancing, as well as those claiming to verify or compensate for data breaches. Even if the caller possesses personal information, it is important to verify through the official customer service channels of the financial institution before clicking on any links or installing apps.

Financial institutions are also enhancing their monitoring and issuing warnings about impersonation contacts. Egaram Savings Bank, for instance, suspended related services immediately after the incident and blocked external IPs while providing support for damage reports through its customer service.

Financial institutions must accurately inform customers about the leaked data and its scope, as well as provide clear official inquiry channels and warnings about impersonation contacts. Consumers should remain vigilant against requests for additional personal information or money transfers under the pretext of loan conversions or damage compensation.