SEOUL, Oct 4 — South Korean President Lee Jae Myung has ordered a thorough investigation and response measures over recent personal data leak incidents at banks, finance companies, and public agencies, Seoul's Presidential Office said yesterday.
Financial Services Commission (FSC) Chairman Lee Eog-weon convened an emergency meeting with financial industry associations, regulators and executives from affected institutions yesterday, warning that the sector must respond with the highest level of vigilance.
He said authorities could not rule out the possibility that artificial intelligence (AI) was used in the attacks and called for an "AI attacks defended by AI" approach, while also signalling broader upgrades to the financial sector's cybersecurity framework.
Yesterday's meeting came after similar talks on Friday (October 2), when the FSC said Shinhan Bank, KB Kookmin Bank, and others had reported cyberattacks, while Yonhap news agency reported that Hana Bank and Woori Bank had also suffered breaches.
The banks could not immediately be reached for comment outside regular working hours.
The financial regulator said authorities had launched on-site investigations after Shinhan Bank reported a breach on Wednesday (September 30) and had since expanded probes into other reported incidents.
The FSC directed financial institutions to carry out comprehensive security inspections, tighten access controls, minimise external system access, and strengthen consumer protection measures.
It also said attack methods, Internet protocol addresses, and other threat information would be rapidly shared across the industry to prevent further incidents.
Yonhap reported that regulators believe the attacks may have broadly scanned multiple financial companies for vulnerabilities rather than targeting a single institution.
Attack traffic was reported to have originated from IP addresses across several countries, including the United States, Japan, Singapore, Vietnam, and the United Kingdom, based on bank data submitted to lawmakers.
According to multiple Korean media reports, yesterday's emergency meeting was brought forward from October 7 after additional breaches were discovered at second-tier financial institutions.
The country's main opposition People Power Party said authorities should also investigate the possibility of North Korean involvement, citing past cyberattacks attributed to Pyongyang against South Korean financial institutions.
