SecurityNov 10, 2026, 2:48 PM UTC·1 min read

Korea's Financial Security Institute Hit by Hack, Data Leaked

South Korea's Financial Security Institute says its system for assessing financial firms' security was hacked, with some submitted documents leaked. Regulators ordered a full review.

Padlock over a digital network graphic symbolizing a cyberattack on a financial security system. — Image: 미래를 보는 창 - 전자신문

The Financial Security Institute (FSI), the body responsible for cybersecurity in South Korea's financial sector, has itself been breached. Its assessment support system was hacked, and signs point to the leak of some data, according to the information available so far.

The institute detected the intrusion and the partial data leak on 9 November in its "continuous information security assessment support system". It blocked access as an emergency measure and reported the incident to authorities including the Financial Services Commission. The regulator has since told the institute to establish how the breach happened and to re-examine all of its systems.

What was exposed

The affected system supports the work of evaluating and checking whether financial companies manage security properly. Financial firms have been submitting security-management documents to it for those assessments. The leaked material is understood to consist mainly of those submitted documents.

There are also indications that some personal information written in the documents was leaked along with them. How far the leak extends, particularly regarding information on the security posture of individual financial companies, still needs to be confirmed.

Why it matters

Documents describing how banks, insurers and other lenders manage their security are sensitive by nature. If details about weaknesses or controls were exposed, they could be useful to attackers targeting the institutions concerned. That makes the incident more serious than a typical data leak, and it is embarrassing for an organisation whose job is to protect the sector.

The next steps are the investigation into the cause ordered by the financial authorities and a check of the full system. The scope of the leaked information, including the personal data involved, is expected to become clearer as that work progresses.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Dialo: learn languages by speaking

Talk to an AI conversation partner; every sentence comes back corrected and explained in your language. 9 languages, A1 to C2.

ediviewer: read EDI files like documents

Open EDIFACT and X12 messages, see every segment explained, convert to JSON/XML, export PDF and Excel. Runs locally, no upload.

giftdetect: the right gift in minutes

Pick who it is for, the occasion and their personality. The search engine reads product descriptions from local shops and ranks what fits. Free, no sign-up.

Tags:financial security institutedata breachsouth koreahackingfintech security