Seoul demands probe into Shinhan, Hana data breaches

President calls for investigation into financial data leaks

South Korean President Lee Jae Myung, on Sunday, 4 October 2026, requested a comprehensive investigation into a series of personal data breaches impacting several major financial institutions. Presidential spokesperson Kang Yu-jung stated that President Lee was briefed on the incidents at both financial and public institutions and the measures being taken in response.

He instructed authorities to treat the matter with seriousness, conduct a thorough probe, and develop effective solutions to address the issue. This directive follows a period where multiple financial firms have reported compromises of customer information, prompting concerns across the sector regarding cybersecurity protocols and data protection.

Specifics of bank data compromises

Multiple financial firms, including Hana Bank, KB Kookmin Bank, and Shinhan Bank, have experienced successive customer information leaks due to recent hacking attacks. Shinhan Bank disclosed on Thursday, 1 October 2026, that personal details for approximately 25,000 customers, such as names, phone numbers, and annual income, were compromised.

Sources indicated that advanced artificial intelligence tools were used in this attack. Hana Bank identified 89 customers whose personal information was leaked. Woori Bank and NH Nonghyup Bank also faced similar hacking attempts but successfully blocked unauthorised access to their systems, preventing any data loss, according to the primary source.

Regulatory bodies convene emergency meeting

In response to the breaches, Financial Services Commission (FSC) Chairman Lee Eog-weon and Financial Supervisory Service (FSS) Governor Lee Chan-jin held an emergency meeting with executives from the affected institutions.

The FSC chief noted the detection of multiple security breaches across various financial sectors, encompassing major commercial banks, savings banks, and specialised credit finance firms, all occurring within a short timeframe.

He indicated that no sensitive information directly usable for unauthorised payments appeared to have been leaked so far, providing a preliminary assessment of the immediate financial risk from these incidents.

Heightened vigilance and future measures for financial sector

Despite the absence of immediate payment-related compromises, the FSC Chairman urged the financial sector to maintain the highest level of vigilance. He warned that the leaked information could still be exploited for voice phishing or other fraudulent activities, highlighting the ongoing risk to customers.

The possibility of artificial intelligence tools being employed in these hacking incidents was also acknowledged by the FSC.

Financial institutions are expected to implement more robust security protocols and invest in advanced threat detection systems to prevent future occurrences and mitigate risks from compromised data, with regulatory oversight likely to intensify in the coming months.