- OK Savings Bank confirmed that a cyberattack on its loan application website exposed personal and financial information belonging to 250 customers, up from an initial estimate of 183.
- The breach exposed bank account numbers, income, loan amounts and personal identifiers, creating potential risks of targeted phishing and financial fraud. No secondary financial losses have been identified.
- South Korean financial regulators are preparing broader cybersecurity reviews covering external access points, authentication controls, threat monitoring and management accountability.
South Korea’s OK Savings Bank has confirmed that a cyberattack targeting its online loan application system exposed the personal and financial information of 250 customers, raising concerns about potential fraud and security weaknesses in customer-facing banking platforms.
The bank revised the number of affected customers from 183 to 250 on October 15, 2026, following additional forensic analysis. The incident exposed sensitive information, including account numbers, annual income, loan amounts and employment details.
The unauthorized access lasted approximately five and a half hours, beginning at 8:44 p.m. on October 11 and ending at 2:14 a.m. on October 12.
Abnormal traffic was detected at approximately 10:00 a.m. on October 12, nearly eight hours after the attack ended. By 11:35 a.m., the bank had implemented emergency authorization controls and blocked suspicious IP addresses and access routes.
The compromised records included customer names, dates of birth, mobile phone numbers, residential addresses, email addresses, bank account numbers, employer information, business registration numbers, annual income and loan amounts.
South Korean resident registration numbers were not exposed, according to the bank.
The combination of personal identifiers and financial information could allow criminals to develop targeted phishing campaigns, impersonate legitimate financial institutions or approach customers with fraudulent loan offers.
OK Savings Bank appointed two external cybersecurity firms to conduct forensic investigations on the afternoon of October 12 and reported the breach to South Korea’s Financial Supervisory Service on October 13.
Following further examination, the bank established the final reported number of affected customers at 250 on October 15.
Affected individuals have been notified through text messages and email, while a dedicated communication channel has been established for customer inquiries and reports of suspected financial losses.
The bank has advised customers to avoid suspicious links and consider using financial transaction blocking services to prevent unauthorized activity.
According to OK Savings Bank, investigators have found no evidence of secondary damage, including confirmed financial fraud, as of its latest announcement.
The institution said it had blocked malicious access points, completed emergency security inspections and strengthened its monitoring procedures.
“We take this data breach very seriously and deeply apologize for the concern caused to our customers,” an OK Savings Bank representative said.
We will use this incident as an opportunity to conduct a comprehensive review of our personal information protection and security systems, and we are committed to strengthening our defenses to prevent any recurrence.
The attack adds to cybersecurity concerns across South Korea’s financial sector, where publicly accessible banking applications and digital service portals represent potential entry points for unauthorized access.
Previous data breaches have involved other savings banks, including Yegaram Savings Bank and Welcome Savings Bank.
Reported hacking incidents have also affected major financial institutions such as Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Hyundai Capital and the National Agricultural Cooperative Federation, known as NongHyup.
Although investigators initially considered whether AI-assisted techniques could have been involved in the OK Savings Bank attack, neither the perpetrators nor the specific intrusion methods have been confirmed.
Financial industry specialists have identified externally accessible application systems as a recurring source of cybersecurity exposure, particularly as automated scanning tools make it easier to identify potential vulnerabilities.
The incident is expected to contribute to wider regulatory scrutiny of cybersecurity practices in South Korea’s banking and financial services industry.
The Financial Services Commission (FSC) plans to review external system interfaces, authentication management, security monitoring arrangements and the responsibilities of senior executives and corporate boards.
Shin Jin-chang, secretary general of the FSC, said the review would extend beyond individual technical vulnerabilities to examine broader weaknesses in financial institutions’ security governance.
We will do our utmost to ensure a thorough review and fundamental institutional improvement, covering not only attack surface management, but also the security monitoring systems across the entire financial sector and the accountability of leadership.
Shin Jin-chang, secretary general of the FSC
Regulators will investigate whether OK Savings Bank complied with its technical and administrative obligations to protect customer information.
The nature and extent of the exposed data, together with any subsequent financial losses, will be important considerations in determining possible regulatory penalties.
For South Korea’s savings bank industry, the incident has renewed attention on the need for stronger security controls, more effective threat intelligence sharing and coordinated defenses against cyberattacks targeting digital financial services.
