SK Shieldus hack damage spreads to Financial Security Institute
SpilloverSpillover from the SK Shieldus incident · View original incident →The Financial Security Institute (FSI) was also affected by the SK Shieldus hack. As the damage to the FSI came to light, the scope of the SK Shieldus hack widened.
Key facts
- Affected organization
- Financial Security Institute
- Original incident
- SK Shieldus hack leaks 15.1GB of client security data
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Spread of damage from the SK Shieldus hack
- Location
- South Korea
Timeline
- It emerged that the Financial Security Institute (FSI) had also been affected by the SK Shieldus hack.
Original incident
This is spillover from the SK Shieldus incident.
SK Shieldus hack leaks 15.1GB of client security data
Impact: 15.1GB of data related to 120 private companies and numerous public institutions
SK Shieldus was hacked in October 2025, leaking 15.1GB of client-related data. It was found that security monitoring system deployment materials and solution verification materials for 120 private companies and numerous public institutions were leaked through the personal email accounts of two employees that were connected to a honeypot while automatically logged in. The Personal Information Protection Commission (PIPC) launched an investigation, and SK Shieldus began a full review of 80,000 emails.
Related reports: 30 · last report →
1 related reports
Other incidents at Financial Security Institute
Financial Security Institute hack exposes data from 48 financial firms
350Impact: An estimated 130 or more files from 48 financial firms leaked, along with approximately 200 administrative forms, more than 300 personal information entries, and more than 350 system user information records
The Financial Security Institute detected a data leak from its continuous information security assessment system at around 3 p.m. on November 9, blocked access, and reported the incident to the Financial Services Commission (FSC) and the Korea Internet & Security Agency (KISA). An estimated 130 or more files from 48 financial firms were leaked, along with approximately 200 administrative forms, more than 300 personal information entries in those forms, and more than 350 system user information records. The attacker bypassed SMS verification to create an account impersonating the Financial Supervisory Service and exploited inadequate access authorization checks in an operational inspection feature. The institute blocked 246 attacking IP addresses, while the FSC launched an on-site inspection and announced a targeted audit.
Related reports: 169 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.