Breaches and incidents
Shinhan Bank (Korea): authentication bypass exposes about 25,000 customers’ income and loan data
Shinhan Bank apologised after personal information of about 25,000 customers, including names, phone numbers, annual income and loan eligibility limits...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- Shinhan Bank apologised after personal information of about 25,000 customers, including names, phone numbers, annual income and loan eligibility limits, was leaked (Korea Times).
- Root cause: an unauthorized external party gained access “through an abnormal method that bypassed authentication” (Korea Times); some raised credential stuffing as a possibility, and JoongAng Daily cites sources saying hackers used advanced AI tools.
- No attacker named.
- Shinhan activated an emergency response team, CEO Jung Sang-hyuk said the bank will take full responsibility for losses, and the FSS conducted an on-site inspection; Woori Bank and NH Nonghyup Bank blocked attempts without data loss (JoongAng Daily).