Malware infections at two lending companies leak customer data
At two lending companies, malware infected work PCs while they were accessing external websites, and customer information was leaked through access control vulnerabilities. The attackers used the leaked information to demand money or posted it for sale on the dark web, and also sent phishing emails impersonating the companies that promised to write off debts in exchange for cryptocurrency. On 13 May, South Korea's Financial Supervisory Service (FSS) summoned the chief executives of 20 lending companies and said it would impose strict sanctions for data leaks resulting from poor security.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer information of two lending companies
- Cause / method
- Malware infection while work PCs accessed external websites, and access control vulnerabilities
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The leak of customer information from two lending companies and its use for ransom demands, dark web sale posts and impersonation phishing emails came to light.
- The FSS held a meeting with the chief executives of 20 lending companies and announced a policy of strict sanctions for data leaks resulting from poor security.
- A case in which information dating back 30 years had been leaked came to light.
7 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.