Welcome Savings Bank and Hyundai Capital were unaware of a hacking attack for nearly five days after it occurred.
According to materials submitted by the Financial Supervisory Service to Han Chang-min, a member of the National Assembly's Political Affairs Committee, Welcome Savings Bank reported that the breach occurred at 5:09 PM on September 27.
However, the bank did not recognize the breach until 4:04 PM on October 2. They identified the incident approximately 116 hours and 55 minutes after it occurred, following a self-inspection triggered by an email from the Financial Security Agency that shared related internet protocol (IP) information after the Shinhan Bank hacking incident.
The bank initiated initial responses, including blocking the IP, at 4:12 PM, and communicated the situation to the operations manager one minute later. By 4:25 PM, they had completed their response. The duration of the attack was reported to be about seven minutes.
The number of data records leaked in this attack is estimated to be 2,370, with 2,299 of those containing personal information, according to Welcome Savings Bank. This figure does not account for duplicates, and the bank plans to report based on the number of affected individuals later.
The leaked information reportedly includes corporate internet banking IDs, company names, names of representatives, business contact numbers, mobile phone numbers, and email addresses.
Hyundai Capital also discovered that some personal information of 146 housing loan recruiters had been leaked, but they only recognized the incident five days later.
According to a report submitted by Hyundai Capital to the Financial Supervisory Service, the hacking attack began at 6:37 AM on September 27 and lasted for 24 minutes, ending at 7:01 AM the same day.
However, Hyundai Capital did not become aware of the incident until 5:08 PM on October 2. Similar to Welcome Savings Bank, they confirmed the leak while checking access logs related to the hacking IP with the assistance of the Financial Security Agency, discovering that private resident registration numbers had been exposed on a site for housing loan recruiters.
Han Chang-min stated, "It is a significant issue that financial companies still fail to respond adequately despite repeated incidents of personal information leaks. I will thoroughly examine the responsibilities of both the financial companies and the supervisory authorities during the national audit."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.