Overview
- President Lee ordered a thorough investigation and response on Sunday after Shinhan Bank first reported a breach on Sept. 30 and other banks later disclosed similar incidents.
- The Financial Services Commission convened an emergency meeting that moved forward from Oct. 7 and told firms to run comprehensive security checks, tighten access controls and reduce external system exposure.
- Regulators directed rapid sharing of attack indicators across banks and said on-site probes have been expanded into affected firms and public agencies to contain further data loss.
- Investigators reported attack traffic tied to IP addresses in the United States, Japan, Singapore, Vietnam and Britain but said technical attribution is ongoing as political voices urged probes into possible North Korean links.
- Officials warned leaked customer data could be used for voice phishing and other scams and said the episode will drive upgrades to sector cybersecurity, including using AI tools to defend against AI-enabled attacks.