South Korea orders security checks after bank attacks
Updated 6 October 2026: South Korea’s Financial Services Commission issued a consumer alert after financial-sector data incidents. Leaked names, addresses and financial context could support tailored loan and compensation scams. Passwords and one-time-password information were not leaked, and no related theft of customer funds has been confirmed so far.
Customers should confirm exposure through their financial institution’s official website, app or customer-service number. Do not trust contact merely because it includes accurate personal details, click unsolicited links, install requested apps or send money for compensation, account protection or a loan.
From 6 October, authorities opened a one-month secondary-harm response period, extendable if needed. Financial firms were told to support customers, increase fraud monitoring and share suspicious indicators. This is not a patch or inspection deadline.
South Korea’s Prime Minister ordered a wider investigation, consumer protection and broader security checks. The statement says AI is increasingly used in hacking generally. It does not establish that AI caused these incidents.
Original report, 5 October 2026: The Commission said a 30 September Shinhan Bank information leak was followed by further attacks at KB Kookmin Bank and other financial firms. It opened on-site investigations, shared threat information with KISA and convened an emergency meeting on 2 October.
Check exposed systems now
Financial firms should inspect every internet-accessible system, remove unnecessary exposure and review authentication and access controls. Defenders should validate inventories and access paths, then preserve evidence for regulators. The reviewed primary notices do not identify the exact cause, actor or total number of affected customers.
Sources: Financial Services Commission consumer alert, 6 October 2026; Prime Minister’s Office statement, 6 October 2026; and Financial Services Commission incident notice, 2 October 2026.
