20 customers, 1,791 employees and partner staff affected; domestic IP flagged, Financial Supervisory Service notified

[KB Capital]
[KB Capital]

KB Capital suffered a cyberattack that exposed the personal data of more than 1,800 customers, employees and others.

Financial industry sources said KB Capital detected an abnormal information query attempt in its vehicle lease asset management system on Tuesday and confirmed that personal data had been leaked. After identifying multiple suspicious access attempts through domestic internet protocol (IP) addresses, the company immediately blocked the connections and reported the incident to the Financial Supervisory Service the same day.

The total number of individuals confirmed to have had their data exposed stands at 1,811 — 20 general customers and 1,791 employees and partner company staff. A KB Capital official said the final count could decrease, as some individuals may have been counted more than once.

The leaked data for customers includes names, dates of birth, mobile phone numbers, addresses and vehicle registration numbers. For employees and partner company staff, the compromised information includes user account IDs, names, contact details, department names, company names and job titles.

A KB Capital official said the user account information refers to employee ID numbers and login IDs used to access the system, and does not include passwords or authentication credentials. "This was not a hack carried out through the theft of employee accounts," the official said.

The specific method of intrusion and the identity of the attacker have not yet been determined. Investigators have also not established who was actually using the domestic IP addresses involved, or whether those addresses are linked to IP addresses used in previous cyberattacks on financial institutions.

The breached system is an internal business platform used by employees and partner company staff to manage vehicle lease assets, including vehicle transport operations. KB Capital said the system has no connection to financial transactions.

The Financial Supervisory Service is expected to conduct an on-site inspection, taking into account staffing conditions and other factors.


snsd@heraldcorp.com