Now Hacked
EN-GB
Hacking & intrusion

Zoomfund cyber-attack steals about ₩300 million in deposits from over 100 customers

First reported · Last reported · 10 related reports

On 25–26 October, a hacker broke into Zoomfund’s system and requested transfers disguised as legitimate transactions, diverting approximately ₩300 million in deposits belonging to over 100 customers to third-party accounts. Zoomfund also acknowledged a personal data leak, blocked access to its website and app, and said it would repay all affected deposits in full. On 8 November, it emerged that the fraudulently transferred deposits had been recovered and that the Financial Supervisory Service (FSS) had completed its on-site inspection and was checking whether consumers had suffered losses.

Key facts

Affected organisation
Zoomfund
Incident type
Hacking & intrusion
Occurred / detected
2026-10-25
Scale of damage
Approximately ₩300 million in deposits stolen from over 100 customers and subsequently recovered; personal data leaked
Cause / method
Unauthorised intrusion into the system followed by transfer requests to an external deposit-holding institution disguised as legitimate transactions
Location
South Korea

Timeline

  1. A hacker interfered with the transfer request process and diverted approximately ₩300 million in customer deposits to third-party accounts.
  2. Zoomfund acknowledged a personal data leak and blocked access to its website and app, while the Financial Supervisory Service began an on-site inspection.
  3. Zoomfund said it would repay affected customers’ deposits in full.
  4. It emerged that the fraudulently transferred deposits had been recovered and that the Financial Supervisory Service had completed its on-site inspection and was checking whether consumers had suffered losses.

10 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.