Financial sector cybersecurity reforms planned by South Korea following breaches at banking and cryptocurrency platforms

Financial sector cybersecurity reforms planned by South Korea following breaches at banking and cryptocurrency platforms

Following a comprehensive evaluation that uncovered security vulnerabilities across 130 financial institutions, South Korea has announced plans for enhanced cybersecurity measures.

Following an examination of recent security breaches affecting 16 organizations, including cryptocurrency exchange platforms, South Korean authorities are preparing to implement stricter cybersecurity standards for financial sector entities.

Following a comprehensive industry examination that revealed cybersecurity weaknesses in 130 out of 555 financial organizations, the Financial Services Commission (FSC) announced it would work toward implementing enhanced threat detection capabilities, increased frequency of security evaluations, and greater executive responsibility.

According to the FSC, approximately 100,000 pieces of customer data were compromised throughout the impacted organizations, encompassing names, communication details, and identification numbers.

Among the impacted organizations are Streami, which operates Gopax, and crypto trading platform Prabang, both of which had previously made public disclosures that an Oct. 2 hack resulted in the exposure of personal info of some customers.

According to the proposed regulatory changes, major financial institutions would be required to complete vulnerability assessments no less than twice every year. The regulatory body also intends to improve information-sharing infrastructure and is evaluating artificial intelligence use in security monitoring for smaller companies.

The regulatory agency is also weighing the possibility of permitting supplementary cybersecurity inspections beyond routine assessment schedules when immediate threats arise, forming part of initiatives to avert future incidents.

The FSC said they are still investigating whether the incidents involved AI use or were linked to the same attackers.

← Назад к блогу