Now Hacked
EN-GB
Data breach

Hack of two insurance agencies leaks data of 1,107 customers and staff

First reported · Last reported · 15 related reports

Hacks at two insurance agencies, Hana Financial Find and UFirst, leaked the personal information of a total of 1,107 customers and staff. A system developer's PC was infected with malware, administrator login credentials were stolen, and these were used to carry out the hack. The insurance contract types, insurers, policy numbers and premiums of some customers were also leaked, and the Financial Security Institute and the Personal Information Protection Commission (PIPC) launched investigations.

Key facts

Affected organisation
Hana Financial Find
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal information of a total of 1,107 customers and staff, plus insurance contract information of some customers
Cause / method
Hack using administrator login credentials stolen via malware infection of a developer's PC
Location
South Korea

If your data was exposed

Exposed dataUsernamePasswordUsage & purchase history

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Signs of hacking were found at two insurance agencies, and the Financial Security Institute launched an investigation.
  2. Hana Financial Find and UFirst began assessing the damage from the hack.
  3. The Personal Information Protection Commission (PIPC) launched an investigation into the insurance agencies' personal data leak.
  4. It was confirmed that a hack using administrator login credentials stolen from a developer's PC had leaked the personal information of a total of 1,107 people.

15 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.