South Korea’s Financial Security Institute reported a breach on November 9 in which information from financial companies was apparently exposed. The attack targeted its Information Security Ongoing Assessment support site, where companies submit documents used to evaluate their security controls. Authorities said some administrative documents and application information may have been taken, with signs that limited personal information was included, although the scope and sensitivity of the exposed data remain under review.
The institute placed the site into maintenance on November 10 and reportedly notified companies whose materials were identified as affected.