According to Shinhan Bank on the 1st, an unauthorized external party accessed some of the bank's services through abnormal means and extracted customer information.
The leaked data included personal and credit information used in the loan application process, such as customer names, phone numbers, connecting information (CI), annual income and calculated credit limits.
The FSS dispatched personnel to Shinhan Bank on the afternoon of the 30th of last month to begin an on-site inspection. It is currently verifying the specific types and scale of the leaked information, how the incident occurred and the route of the leak.
Shinhan Bank activated an emergency response system immediately after identifying the breach. It blocked external IP access, suspended related services and applied new security policies to prevent further damage.
In an apology statement the same day, Jung said, "We deeply apologize for causing concern to our customers and the public as the personal and credit information of some customers was leaked."
He added, "We will take full responsibility and provide full compensation for any damage incurred by customers as a result of the personal and credit information leak."
Jung also said, "We will re-examine our entire personal credit information protection system from the ground up, improve work processes and strengthen employee training systems."
