NH NongHyup Bank reports no data leak after hacking attack, restricts access to loan information

NH NongHyup Bank suffered a hacking attack but had no data leak. While Shinhan Bank’s service for checking the progress of loan applications submitted by loan counselors was breached, NongHyup Bank restricted the collection of customer information related to loans to internal employees.

Woori Bank also prevented a data leak and uses Xint Web from global security company Theori alongside its own inspection tools to diagnose vulnerabilities in real time. A bank representative said the bank understood that the solutions kept running during the attack and blocked it through the system. Its service exclusively for loan solicitors uses WON certificates and smartphone authentication.

Financial authorities said on the 5th that the hacking incidents had exposed customer names, dates of birth, contact details and resident registration numbers, among other information. However, they understood that sensitive information directly usable for fraudulent payments had not yet been leaked.

A financial authorities representative said differences among financial companies reflected how well they operated multiple authentication systems, physical barriers, access permission management and information encryption together.

The credit transaction blocking service blocks credit transactions in an applicant’s name across the financial sector, including unsecured loans, card loans and credit card issuance. The remote account opening blocking service prevents accounts from being opened remotely without the person’s knowledge. Applications can be made through financial company branches, the Korea Financial Telecommunications and Clearings Institute’s AccountInfo app, bank mobile banking services and other channels.