South Korea's financial regulator says 470,000 data records leaked from 37 firms in a month
More than 470,000 personal data records have leaked from 37 financial companies in about a month, South Korea's Financial Services Commission said, with roughly 1 billion won ($745,000) stolen in the incidents.
The FSC said 40 data leak incidents had been reported since the first was detected on 30 September. The affected firms include four commercial banks, five financial investment firms, three insurance firms and five savings banks, it said after meeting the Financial Supervisory Service, the Financial Security Institute and industry associations to review data protection and artificial intelligence use in the sector.
The regulator said the leaked data did not include information that could be used for illegal financial transactions, such as customers' names, national identification numbers or bank account numbers. Funds held by some smaller brokerages, insurers and online financial businesses were stolen, the FSC said, while customers' money remained intact.
The FSC said it will run security checks at 580 financial companies across the sector and review their internal security controls by the end of November. Chairman Lee Eog-weon said the regulator would not tolerate incidents caused by ignoring known security risks, neglecting basic management duties or relying on perfunctory inspections, and would hold management, including chief executives, accountable under relevant laws for serious failures or negligence in response.
What it means for Pakistan: The episode is a reminder for Pakistan's banks, brokers and fintechs as they digitise: the State Bank of Pakistan and SECP already require cyber security and data protection controls, and the sector's push into online onboarding and AI tools raises the same risk of breaches traced to neglected basics. For Pakistani users, the case shows why customer funds are typically ring-fenced from a firm's own losses, and why regulators are moving to hold senior management personally accountable when controls fail.
