Virtual Event: Threat Detection & Incident Response Summit - Watch Now
Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

Angry South Koreans Flood Banks After Massive Data Leak

SEOUL – Tens of thousands of South Koreans flooded banks and call centers Tuesday to cancel credit cards following the unprecedented theft of the personal data of at least 20 million people.

SEOUL – Tens of thousands of South Koreans flooded banks and call centers Tuesday to cancel credit cards following the unprecedented theft of the personal data of at least 20 million people.

Since Monday, more than 1.15 million victims of the country’s largest-ever leak of private financial information have cancelled their credit cards permanently or requested new ones, according to the Financial Supervisory Service (FSS).

The panic has its roots in the arrest earlier this month of an employee from personal credit ratings firm Korea Credit Bureau, on charges of stealing and selling data from customers of three credit card firms while working as a temporary consultant.

South Korea 

On Sunday financial regulators announced that at least 20 million people — in a country of 50 million — had been victims of the data theft.

The data stolen from the internal servers of KB Kookmin Card, Lotte Card and NH Nonghyup Card included names, social security numbers, phone numbers, e-mail addresses, credit card numbers and expiration dates.

The three firms deployed thousands of extra workers to branches and call centers to handle the complaints and cancellations that poured in when the extent of the scam became apparent.

Advertisement. Scroll to continue reading.

“We’ve been totally overwhelmed for the past two days,” said one official at KB Kookmin Card.

Social networking sites and major Internet portals were deluged with complaints about the long wait at bank branches and problems with paralysed websites and call centers.

“I tried the call centre for more than six hours with no success, and eventually had to go to the bank to wait nearly an hour to cancel my credit card,” said one NH Nonghyup customer.

“I’m at Lotte Card (office) to cancel my card. They say I have to wait six hours!” tweeted another angry customer, @casiopea1027.

All special call centers run by the three firms were busy Tuesday and some of their websites could not be accessed at all.

Dozens of their top executives have tendered their resignations, while the government is expected to announce special measures aimed at preventing a similar crisis in the future.

Regulators have launched investigations into security measures at the affected firms.

“We will hold them fully responsible for the data leak if their sharing of client data among affiliates and lax internal control turn out to be the cause,” FSS chief Choi Soo-Hyun was quoted as saying by Yonhap news agency.

President Park Geun-Hye has called for strong punitive measures against those responsible for the data theft amid growing concerns among customers that their information could fall into the hands of scammers.

The three firms have said they would fully cover financial losses if their customers fell victim to scams related to the latest data theft.

Official data showed more than nine million clients have logged on to the websites of the three firms to check whether their personal information was stolen.

Many major South Korean companies have seen customers’ data leaked in recent years, either by hacking attacks or their own employees.

An employee of Citibank Korea was arrested last month for stealing the personal data of 34,000 customers.

In 2012 two South Korean hackers were arrested for stealing the data of 8.7 million customers at the nation’s second-biggest mobile operator.

In November 2011 Seoul’s top games developer Nexon saw the personal information on 13 million users of its popular online game MapleStory stolen by hackers.

In July the same year, personal data from 35 million users of Cyworld — the South’s social networking site — was stolen by hackers.

Related: 20 Million People Fall Victim to South Korea Data Breach

RelatedInsider Steals Data of 2 Million Vodafone Germany Customers

Written By

AFP 2023

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Joe Chen has become Chief Technology Officer at Trellix.

Usercentrics has named Pawan Hegde as COO and Elena Ignatova as CPTO.

SecureAuth has named Mark van Oppen as Chief Revenue Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.