How many financial companies and data leak incidents were reported in South Korea since Sept. 30?

The FSC said 40 incidents had been reported at 37 companies. The affected firms included commercial banks, financial investment firms, insurance firms and savings banks.

What security checks will the FSC conduct after the financial-sector data leaks?

The FSC plans to conduct security checks at 580 financial companies and review their internal security control systems by the end of November. It said management, including CEOs, could be held accountable under relevant laws and regulations for serious failures or negligence in responding.

Over 470,000 pieces of personal data leaked from 37 financial firms: FSC

Q: What personal information was not included in the financial-sector data leaks?

The FSC said the leaked records did not include customers’ names, national identification numbers or bank account numbers that could be used for illegal financial transactions.

Listen

Summary

The Financial Services Commission said Thursday that 40 data leak incidents at 37 financial companies since Sept. 30 exposed more than 470,000 personal data records, with about 1 billion won stolen. The leaked records did not include names, national identification numbers or bank account numbers that could enable illegal financial transactions. The FSC will check security at 580 financial companies and review their internal controls by the end of November. FSC Chairman Lee Eog-weon said executives, including CEOs, would be held accountable for serious security failures or negligence.

Key Facts

The affected companies included four commercial banks, five financial investment firms, three insurance firms and five savings banks.
The estimated stolen amount was 1 billion won, equivalent to $745,000.
The FSC met with financial trade associations and government agencies, including the Financial Supervisory Service and the Financial Security Institute, to review data protection systems and AI capabilities.
The FSC said funds were stolen from some smaller brokerages, insurers and online financial businesses, but customers’ money remained intact.

By Yonhap

Published Nov 5, 2026 10:24 am KST
Updated Nov 5, 2026 10:33 am KST

Financial Services Commission (FSC) Chairman Lee Eog-weon, third from left, speaks during a meeting with officials from financial trade associations and government agencies in Seoul, Thursday. Yonhap

More than 470,000 personal data records have been leaked from 37 companies across the financial sector over the past month, with the amount of funds stolen estimated at 1 billion won ($745,000), the financial regulator said Thursday.

The Financial Services Commission (FSC) held a meeting with officials from financial trade associations and government agencies, including the Financial Supervisory Service and the Financial Security Institute, to review data protection systems and artificial intelligence (AI) capabilities in the financial sector.

Since Sept. 30, when the first data leak was detected, a total of 40 data leak incidents have been reported at 37 companies, including four commercial banks, five financial investment firms, three insurance firms and five savings banks, according to the FSC.

The regulator said the leaked data did not include sensitive personal information that could be used for illegal financial transactions, such as customers' names, national identification numbers or bank account numbers.

Funds held by some smaller brokerages, insurers and online financial businesses were stolen, while their customers' money remained intact, the FSC added.

The FSC said it will conduct security checks at 580 financial companies across the sector and review their internal security control systems by the end of November.

"We will not tolerate practices that cause incidents or exacerbate damage by ignoring known security risks, neglecting even basic management duties or relying on perfunctory inspections and complacent responses," FSC Chairman Lee Eog-weon said.

"We will strictly hold management, including the CEO, accountable in accordance with relevant laws and regulations for serious management failures or negligence in response."

Explore More