Osegi
Security·1 min read

KB Capital data breach exposes details of 1,811 people

South Korean lender KB Capital says hackers pulled personal data on 1,811 people from its car rental asset system. Only 20 were ordinary customers.

A padlock icon over a digital screen showing a car fleet management dashboard, symbolising a data breach at a lender.
Image: 미래를 보는 창 - 전자신문

KB Capital, the South Korean auto and equipment lender, has confirmed a data breach that exposed personal details of 1,811 people. Most of them are not customers at all. They are staff at partner companies and KB Capital's own employees.

The company says the trouble started on 10 November. Its internal vehicle rental asset management system was running under heavy server load, and while engineers looked into it, they spotted a large number of suspicious lookup attempts coming from Korean IP addresses. They blocked the traffic immediately. The same day, KB Capital reported the leak to the Financial Supervisory Service, South Korea's financial regulator, describing it as information theft through a hacking attack.

What data was leaked in the KB Capital breach?

For customers, the exposed information includes name, date of birth, mobile phone number, address and vehicle registration number. For partner company staff and KB Capital employees, it includes name, mobile number, phone number, company name and job title.

The breakdown is lopsided. Only 20 ordinary customers were affected. The other 1,791 are partner-company workers and employees, which brings the total to 1,811.

Will affected people be compensated?

KB Capital says it will pay in full for any damage caused by the leak of personal information. The company did not say in the material available how the attackers got in, or whether the suspicious lookups came from the attackers' own machines or from compromised ones.

For anyone on the list, the practical risk is the usual one with this kind of data: phishing calls and texts that use a real name, a real car and a real address to sound convincing. A call from someone who knows your vehicle number is not automatically your lender.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:kb capitaldata breachsouth koreahackingfinancial supervisory service

More from this day

See all →

More in: Security

See all →