When did the Korean financial institutions’ hacking attacks occur?

The attacks and customer-information leaks took place during the previous week, with several financial companies experiencing back-to-back incidents. The FSS had shortlisted the suspected IP addresses by 6:00 p.m. on Monday.

How did the hacking attacks affect customers of Shinhan Bank and Hana Bank?

Shinhan Bank said information belonging to around 25,000 customers, including names, phone numbers and annual income, was leaked. Hana Bank reported that personal information belonging to 89 customers had been exposed.

28 IP addresses behind recent hacking attacks against Korean financial institutions: watchdog

Listen

Summary

The Financial Supervisory Service identified 28 IP addresses in the United States, Japan and 10 other countries linked to recent hacking attacks against Korean financial institutions Tuesday. Hana Bank, KB Kookmin Bank and Shinhan Bank suffered customer-information leaks, while Woori Bank and NH Nonghyup Bank blocked similar attempts. Shinhan Bank reported that information belonging to around 25,000 customers had been exposed, and President Lee Jae Myung called for a thorough investigation over the weekend.

Key Facts

The FSS had shortlisted the IP addresses across 12 countries by 6:00 p.m. Monday, although the locations of some addresses remained unidentified.
Shinhan Bank said the leaked information included customers’ names, phone numbers and annual income.
Hana Bank found that personal information belonging to 89 customers had been leaked.
Woori Bank and NH Nonghyup Bank were targeted in similar attempts but reported no information leaks after blocking unauthorized access.
Sources said hackers used advanced AI tools in the attack against Shinhan Bank.

By Yonhap

Published Oct 6, 2026 12:08 pm KST
Updated Oct 6, 2026 3:04 pm KST

The Financial Supervisory Service headquarters in Seoul / Korea Times file

The country's financial watchdog has pinpointed 28 internet protocol (IP) addresses in the United States, Japan and 10 other countries used for a series of recent hacking attacks Korean financial institutions, industry sources said Tuesday.

Several financial companies, including Hana Bank, KB Kookmin Bank and Shinhan Bank, suffered back-to-back leaks of customer information in recent hacking attacks last week, raising concerns that more firms might have suffered data breaches.

According to the sources, the Financial Supervisory Service (FSS) has shortlisted IP addresses in 12 countries as of 6:00 p.m. on Monday, which are presumed to have been used for the artificial intelligence (AI) agent-backed hacking.

But it has not been able to pinpoint the locations of some of the IP addresses, they said.

Local financial firms have been in a hurry to check their own security systems to fend off any additional hacking attempts.

Over the weekend, President Lee Jae Myung called for a thorough investigation into the attacks.

On Thursday, Shinhan Bank said personal information of around 25,000 customers, including their names, phone numbers and annual income, had been leaked. Sources said the bank was attacked by hackers who utilized advanced AI tools.

Personal information of 89 customers was found to have been leaked from Hana Bank, while Woori Bank and NH Nonghyup Bank were also targeted in similar hacking attempts, though no personal information was leaked as the banks blocked unauthorized access to their systems.

Explore More