South Korea's Financial Services Commission has named crypto businesses Streami and Pravang among 16 financial companies affected by recent customer-data breaches. The October 14 disclosure included major banks such as Shinhan, Kookmin, Busan, and Hana, alongside companies in other financial sectors.
Streami operates the Gopax exchange. The FSC estimated the exposure at approximately 100,000 pieces of customer data across all affected companies, including names, contact details, resident registration numbers, and email addresses. The commission did not provide a company-level breakdown of the breach.
As of the October 14 announcement, authorities had not identified leaked account passwords or credit card numbers. The Financial Supervisory Service and Financial Security Institute are investigating the attack methods, whether the incidents are linked, and whether a common attacker was responsible.
Wider Security Assessment
A sector-wide security check encompassing 555 financial companies found gaps beyond the confirmed breaches. All companies completed a 12-point security checklist by October 8, with 425 reporting adequate arrangements and 130 reporting areas needing improvement.
Reported shortcomings focused on security patches and monitoring systems, including missing software updates, weak management of legacy systems, absent round-the-clock monitoring, and weaknesses in authentication or access controls. Companies submitted remedial plans and began taking corrective steps.
Planned Regulatory Response
The FSC plans broader security inspections across financial companies, beginning with larger institutions. Proposed measures include vulnerability assessments at least twice yearly, faster sharing of threat information among companies, and clearer accountability lines for chief executives and information security officers.
The FSC also intends to accelerate consideration of easing rules on computer network separation to enable artificial intelligence-based defenses and plans to provide enhanced security support for smaller firms.
