Korea's Financial Security Institute Hit by Data Leak Ahead of Conference

A body built to defend the sector

The institute was launched in 2015 by merging the information sharing and analysis centers of the Korea Financial Telecommunications and Clearings Institute and Koscom with the Financial Security Research Institute. The aim was to bring security monitoring, incident response and vulnerability analysis under one roof, for threats individual firms struggle to handle alone.

Since then it has expanded beyond security, blurring the line between its role and those of related bodies such as the Korea Credit Information Services and the clearings institute. The Financial Data Exchange it opened in 2020 is a prime example. Data provided by a Democratic Party lawmaker's office shows it recorded just three paid transactions worth 14.98 million won in 2024.

Questions over leadership

Director Park Sang-won has also come under fire. He previously handled financial group supervision, planning and management, and small-business and consumer finance at the Financial Supervisory Service, but has no hands-on experience in cybersecurity or incident response. Critics say that makes it hard to defend his ability to lead the agency's core work, and some argue he bears responsibility for managing internal security risk.

The timing adds pressure. The institute is holding its financial information security conference, PISCON 2026, on the 12th in Yeouido, Seoul, under the theme "Today's Strategy for Tomorrow's Finance", to discuss AI-era cyber threats. The leak came three days before the event.

An industry source said attention is on whether the institute will apologize at the conference and explain how the leak happened and how it will prevent a repeat. Because the financial authorities, financial institutions and the affected firms have all been invited, the source said it should explain accountability before talking about future security strategy.