Seoul Tightens Cyber Response After Bank Data Breaches

South Korea's financial regulator has escalated its response after a string of data breaches at financial institutions. The Financial Services Commission (FSC) launched on-site investigations after Shinhan Bank reported a breach on September 30, and has since widened its probes to other reported incidents.

Regulators believe the attacks may have involved broad scanning of multiple financial companies for vulnerabilities rather than a tightly targeted campaign against a single institution. That pattern — probing many organizations for weak points — is consistent with opportunistic rather than bespoke intrusion tradecraft.

Authorities have instructed financial institutions to conduct comprehensive security inspections, tighten access controls, reduce external system access and strengthen consumer protections. The FSC also ordered the rapid sharing of attack methods, IP addresses and other threat information across the financial industry to head off further incidents.

An emergency meeting was brought forward from October 7 after additional breaches were reportedly identified at second-tier financial institutions. Attack traffic was traced to IP addresses in several countries, including the United States, Japan, Singapore, Vietnam and the United Kingdom — a reminder that attribution by source IP is weak evidence in an era of rented infrastructure.