Some Assessment Information Leaked in Financial Security Institute Hack... Authorities Order Full System Review

Financial Security Institute's Ongoing Information Security Assessment Application System
Some information found to have been leaked; incident reported to authorities
Almost no sensitive information in system targeted by hackers
Leak believed to

Some administrative documents submitted by financial companies when applying for continuous information security assessments were leaked after the Financial Security Institute was targeted in a hacking attack. With some security-related information from financial companies exposed, financial authorities called for a thorough review.

According to financial authorities on November 10, the Financial Security Institute became aware of the incident on November 9, blocked access to its continuous information security assessment support system, and reported the incident to relevant authorities, including the Financial Services Commission. The institute is said to have notified individual financial companies of the leak.

The targeted system appears to be a service that supports financial companies' applications for continuous information security assessments and the submission of related documents. A financial authority official explained, "We understand that this is where documents such as application forms are collected to provide security services to financial companies. It is different from the sites where individual banks submit assessments of their security deficiencies." The official added that the leaked personal information could include general details, such as the names of people in charge, listed on the application documents.

The Financial Security Institute believes that most of the leaked information consisted of administrative documents submitted for assessment applications, such as application forms and consent forms for the provision of personal information, and that it did not include sensitive information, such as the results of financial companies' security vulnerability assessments, or personal information. The institute is said to have notified individual financial companies of the leak.

The authorities and the Financial Security Institute are verifying the specific circumstances of the incident, including the nature and scope of the leaked information and the method of attack. Financial authorities said they do not believe sensitive personal credit information was leaked, but called for a comprehensive reassessment of the system, given that the incident occurred at a key institution responsible for financial sector security. A financial authority official said, "Along with investigating the circumstances and cause of the incident, we called for a comprehensive reassessment of all systems operated by the Financial Security Institute." The institute's continuous assessment support system website currently only states that "the server will be temporarily shut down for service improvements."

This content was produced with the assistance of AI translation services.