Financial Security Institute security incident history
Hacking, data breaches and other security incidents involving Financial Security Institute, with related coverage.
Financial Security Institute cyber-attack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 pm on 9 November, blocked access and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorisation checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →SK Shieldus hack damage spreads to Financial Security Institute
↳ Knock-on damage from the SK Shieldus incident · View original incidentThe Financial Security Institute (FSI) was also affected by the SK Shieldus hack. As the damage to the FSI came to light, the scope of the SK Shieldus hack widened.
Read on www.dt.co.kr ↗