VULNpocalypse
Breaches and incidents

KB Kookmin Bank (Korea): employee mobile work system breached, 119 then 2,210 people affected

KB Kookmin said on 2 Oct that names, phone numbers, addresses and encrypted resident registration numbers of 119 customers were exposed via an employee...

Disclosed
Verification
Confirmed by two or more outlets

What happened

  • KB Kookmin said on 2 Oct that names, phone numbers, addresses and encrypted resident registration numbers of 119 customers were exposed via an employee mobile work system (DigitalToday); on 26 Oct it added 1,631 customers and 460 executives and employees, for 2,210 in total, found by reviewing data connected to the attacked system (Korea Times).
  • Root cause: “abnormal external access” recognised late on 30 Sep; method not disclosed. The bank said the increase was not caused by additional attacks.
  • No attacker named.
  • The bank blocked the server and access route, notified customers, opened a counseling center, pledged full compensation, and regulators conducted an on-site investigation (JoongAng Daily).

Sources