South Korea’s Financial Security Institute (FSI) disclosed on November 10, 2026, that it had suffered a data breach linked to an October 9 incident. According to IT Home, citing South Korean outlet The Elec and an FSI notice, the institute detected unauthorized external access to its information-security continuous assessment system during internal monitoring at around 3 p.m. on November 9.
FSI said it cut off external access to the affected system, took emergency security measures and reported the incident to the Financial Services Commission and the Korea Internet & Security Agency. The affected website has been temporarily shut down.
The institute estimated that about 850 records were involved: approximately 200 administrative documents, more than 300 personal-information records and more than 350 system-user records. The user information included names, mobile phone numbers and email addresses; FSI said the names and phone numbers had been masked. An institute official said the cause and actual scope remain under investigation, so the final number of affected records may change.
FSI said the exposed material did not include financial institutions’ system architecture diagrams, Korean resident registration numbers or personal credit information. It also said the affected system does not collect vulnerability analyses or assessment results and does not process ordinary bank customers’ financial transactions.
FSI has informed relevant financial institutions and plans to notify people whose personal information was exposed, including guidance on preventing further harm. It said it would provide compensation if secondary harm resulting from the incident occurs.