Malware infections at two lending companies leak customer data
At two lending companies, malware infected work PCs while they were accessing external websites, and customer information was leaked through access control vulnerabilities. The attackers used the leaked information to demand money or posted it for sale on the dark web, and also sent phishing emails impersonating the companies that promised to forgive debts in exchange for cryptocurrency. On May 13, South Korea's Financial Supervisory Service (FSS) summoned the CEOs of 20 lending companies and said it would impose strict sanctions for data leaks resulting from poor security.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Customer information of two lending companies
- Cause / method
- Malware infection while work PCs accessed external websites, and access control vulnerabilities
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The leak of customer information from two lending companies and its use for ransom demands, dark web sale posts and impersonation phishing emails came to light.
- The FSS held a meeting with the CEOs of 20 lending companies and announced a policy of strict sanctions for data leaks resulting from poor security.
- A case in which information dating back 30 years had been leaked came to light.
7 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.