
The personal credit information of approximately 400 members of the Saemaul Geumgo mutual insurance was leaked through hacking. It is presumed to be the work of a hacker who has recently launched consecutive attacks on the domestic financial sector using AI (artificial intelligence). The hacker targeted the homepage of the Saemaul Geumgo Central Union's mutual business division, which is relatively vulnerable in terms of security.
The Saemaul Geumgo Central Union announced on the 13th that it has confirmed the leakage of personal credit information for some mutual insurance members. The number of victims is approximately 400. It was determined that the credit information of Saemaul Geumgo deposit and savings customers was not leaked. This marks the first confirmation of customer information leakage in the cooperative financial sector amid the recent chain of hacking incidents in the financial industry.
The damage occurred in the Central Union's mutual insurance division. The leaked items include 12 categories: customer number, name, encrypted resident registration number, account number, date of birth, mobile phone number, home and company phone numbers, home and company addresses, email address, and balance. The Central Union stated that there are differences in the information leaked for each individual customer.
The Central Union is individually notifying customers whose leakage has been confirmed via text message about the damage. Mutual insurance members can check their own status of damage and specific leaked items on the mutual insurance homepage.
The Central Union explained that after recognizing the fact of the leakage, it blocked the Internet Protocol (IP) addresses accessed by the hacker and the IPs used for bypass access.
The Central Union has a policy to fully compensate customers if any damage occurs due to this leakage. Inquiries regarding this leakage and reports of damage can be made by contacting the Mutual Support Center (1599-9010).
The Central Union stated that it is taking the incident seriously and plans to review its entire personal information protection system and management procedures. It also announced that it will strengthen its security systems to prevent the recurrence of similar incidents.
Im Jin-woo, Shin Yong-gong-je (CEO) Director, apologized to mutual insurance members, stating, "We will approach the protection of personal information and the rights and interests of mutual insurance members with an even more responsible attitude."
Saemaul Geumgo's announcement of hacking damage came 12 days after the customer information leakage at Shinhan Bank was first disclosed on the 1st. However, the Central Union side explained that they successfully blocked the hacker's attack during the initial incident. This leakage damage is the result of a second attack that occurred on the 10th, and the Central Union announced that it first recognized the fact of the leakage in the afternoon of the 12th.
Considering the methods and means used, this attack is presumed to be the work of the hacker who has consecutively hacked the domestic financial sector. The hacker attacked the Saemaul Geumgo Credit Mutual Insurance homepage, which is relatively vulnerable in terms of security, rather than the Central Union's homepage.
A Central Union official said, "We are taking measures to immediately inspect vulnerabilities in the mutual insurance homepage and strengthen security."