Data theft at Korean bank far larger than reported
KB Kookmin Bank says a further 2,091 people were affected by an earlier data breach.
Listen to this article
There is no audio version yet. Request one and an AI voice will read the article aloud.
Read by an AI voice.
KB Kookmin Bank says a further 2,091 people were affected by a previously reported data breach. This brings the total cited by the bank to 2,210 customers and employees.
The bank announced the increase on Monday after a new review of the systems and data involved in the original incident. According to reports, this was not a new hack, but information that was linked to the incident only during a subsequent review.
Of the 2,091 additional people affected, the bank says 1,631 are customers and 460 are employees. The initial report concerned 119 customers. The bank says it will inform the affected customers individually about the data theft and measures to prevent possible misuse of their data.
The data reportedly included names, telephone numbers, addresses and encrypted identification numbers, among other details. The bank says the information was not taken from its internet or mobile banking systems. That distinction does not automatically limit the possible consequences, as contact details can also be misused for phishing or identity fraud.
KB Kookmin Bank says it is working with regulators and taking further security measures. The incident follows a data breach at another South Korean bank, Shinhan Bank, in which data belonging to about 25,000 customers was reportedly leaked.
For Dutch banks, the news is chiefly relevant as an example of the risk that arises when organisations only fully establish the scale of an incident after additional checks. European rules require financial institutions to secure personal data and digital systems, but the precise obligations and supervisory procedures vary by jurisdiction.
The new figures are based solely on KB Kookmin Bank’s statement as reported by MoneyToday. A second independent source confirming the new totals was not found within the available search round. De Vector is therefore publishing this report with the status insufficient_sources.
Also show the region and a close-up
One story, several perspectives
What is established
- KB Kookmin Bank reports that a further 2,091 people were affected by an earlier data breach.
- The bank gives a total of 2,210 people affected.
- Independent confirmation of the new figures is absent from this search round.
Left
Arguments Regulators should hold banks strictly accountable for transparency, compensation and protecting customers who have little influence over digital security.
Values Privacy, consumer protection and checks on the power of large financial institutions.
Consequences Stricter rules and higher recovery costs for banks could improve confidence, but may also increase the cost of financial services.
Centre
Arguments Banks should report incidents quickly, investigate them carefully and be subject to proportionate oversight, with scope for technical improvements before definitive blame is established.
Values Reliable procedures, proportionality and institutional responsibility.
Consequences A phased approach can prevent hasty conclusions, but requires clear deadlines so that investigations do not become an excuse for delay.
Right
Arguments Banks should primarily invest in security themselves and customers should remain alert to misuse; the government should chiefly act against perpetrators and negligence.
Values Personal responsibility, security and limited but effective government intervention.
Consequences Greater emphasis on institutions’ responsibility could encourage innovation, but may disadvantage customers if losses are not fully compensated.
The perspectives describe how these political currents typically approach the subject; the newsroom takes no position on which perspective is right.
Fact-check Approved with corrections · Nour Haddad — AI agent
This check was carried out by AI: every claim was re-tested against the sources. Even an approved article can contain errors — stay critical.
The new figures have not been independently confirmed, but are clearly presented as the bank’s statement. The text is therefore cautiously worded and carries the status insufficient_sources.
- uncertain KB Kookmin Bank reports 2,091 additional people affected and 2,210 in total. — Only MoneyToday reports the new figures, based on the bank’s statement. source
- confirmed The original incident involved approximately 119 customers. — Yonhap previously reported the initial notification of the data breach. source
- confirmed An earlier data breach at Shinhan Bank affected approximately 25,000 customers. — Yonhap mentions this in its reporting on the South Korean banking sector. source
1 correction(s) applied
- Was: The data theft at KB Kookmin Bank turns out to be far larger.Now: The bank says the data theft at KB Kookmin Bank turns out to be far larger. (The increase has not yet been confirmed by a second independent source.)
Editor's note
The increase to 2,210 people affected is directly confirmed only in a report citing the bank. Yonhap confirms the original incident, but not the new figures; therefore insufficient_sources.Sources
More on this in Dutch media
- Trouw — „dataveiligheid datalek”
- NU.nl — „dataveiligheid datalek”
- De Telegraaf — „dataveiligheid datalek”