South Korean President Lee Jae Myung ordered a thorough investigation into personal-data leaks across banks, other financial companies and public agencies. The direction followed cyberattacks involving several large lenders and expanded the official response beyond individual institutions. Financial regulators were told to examine the incidents and strengthen protections for customers. The government also asked authorities to prepare for attacks that may use artificial intelligence.
The Financial Services Commission convened an emergency meeting with the Financial Supervisory Service, the Financial Security Institute, banks, card companies and industry associations. The commission said Shinhan Bank had reported a leak and that attempted intrusions had also affected KB Kookmin and other institutions. Yonhap reported that Shinhan disclosed information involving about 25,000 customers and Hana Bank 89 customers. It said attempted unauthorised access at Woori Bank and NH NongHyup Bank had been blocked.
REGULATORS ORDER IMMEDIATE SYSTEM CHECKS
The FSC asked financial companies to inspect internet-facing systems and services without delay. It also directed them to tighten authentication and access controls, reduce unnecessary external exposure and share threat information quickly. Supervisors began on-site examinations to establish how the incidents occurred and whether institutions met their security obligations.
The response covers both the immediate breaches and the possibility that attackers scanned several institutions for weaknesses. Reuters reported that officials had not ruled out the use of artificial intelligence in the attacks. Lee called for defences capable of matching that threat, while the FSC placed consumer protection alongside technical remediation.
BANKS FACE A WIDER SUPERVISORY TEST
The investigation raises the prospect of a sector-wide review rather than isolated incident handling. Banks will need to demonstrate control over externally exposed assets, privileged access and information-sharing procedures. The authorities' findings will determine whether additional supervisory measures or sanctions are warranted.
The next milestone is the outcome of the FSC and FSS on-site investigations and any disclosure of the full customer impact. Further action will depend on whether investigators identify common vulnerabilities across institutions or failures in required controls. Until then, the scale of the attacks and any use of artificial intelligence remain under examination.