Korea treats four banks' data leaks as a problem for its whole financial industry

Of the four banks with confirmed leaks, two have put a number on them ^[16]. Hana's is 89 customers ^[11]. Add Shinhan's roughly 25,000 and the disclosed total comes to about 25,089 ^[13], of which Shinhan holds about 99.6%, or about 281 times Hana's figure ^[14][15].

Shinhan's breach is also the only one whose route has been described. An unauthorized outside party got abnormal access to a service the bank reserves for loan brokers, Shinhan confirmed on Sept. 30 ^[4], and the fields taken included names, phone numbers and annual income ^[5]. Yonhap, citing unnamed sources, reported that the attackers used advanced AI tools ^[17].

The presidential office described the job broadly. "He instructed authorities to take the matter seriously, conduct a thorough investigation and spare no effort in coming up with measures to address the issue," presidential spokesperson Kang Yu-jung said in a press release on Sunday ^[2][3]. Regulators plan to widen the investigation and have not ruled out further hacking leaks in sectors beyond finance ^[9].

If the probe finds a shared weak point, such as broker-facing services or other third-party access, the countermeasures become industry rules and every lender running such a channel pays to comply. Separate failures at separate banks would instead point to penalties on the four that leaked, weighted toward Shinhan by its share of the records. Leaks found outside finance would make banks one constituency in a national cyber response, with a smaller share of the attention and of the bill.

I think the first is the likeliest, because of who was summoned. A meeting meant only to discipline four banks would not need the heads of every financial industry association ^[10]. The counter-case is that a regulator convenes a same-day emergency meeting after a presidential order whatever the size of the damage. The damage measured so far is about 25,000 customers at one bank ^[4]. Neither account includes a new rule, a fine or a budget.

The view is wrong if KB Kookmin and BNK Busan report counts closer to Hana's 89 than to Shinhan's 25,000 ^[6][11]. It is also wrong if the broker service turns out to be a weakness only Shinhan had.