South Korea's FSI Breach Exposes Employee Data and Prompts Review

A breach at South Korea’s FSI exposed financial institution employees’ personal information, prompting authorities to order a full review of the incident and require a compensation mechanism.

About 300 records containing employees’ names and birth dates were exposed, along with roughly 350 masked contact details. Attackers frequently changed IP addresses to make their access appear normal.

The FSI, a financial-security institution under South Korea’s Financial Services Commission, took its information-protection assessment system offline and disconnected it from the network. Regulators were notified.

Financial consumers’ personal credit information and sensitive core security data, including system architecture diagrams, were not exposed. Authorities ordered a full review and required a compensation mechanism to be established.