ENKR

Financial Security Institute continuous-assessment system breach

Add to my breach check

Made public

What leaked4

Hard to replace

  • Email address
  • Partial phone number

Permanent

  • Date of birth
  • Full name
  • Date of birthin submitted forms
  • Email addresssystem users
  • Full namenames in submitted forms; most were masked, but some small financial companies sent unmasked data
  • Partial phone numbersystem users: masked names and mobile numbers

To-dos1 · about 5 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: phishing messages
Company
Financial Security Institute
When it happened
Company detected it
Made public
Notice
Leak confirmed
Affected
unknown; about 300 items of personal data in about 200 administrative forms that financial companies submitted, and about 350 records of system users · FSI release as reported by the press

How the facts developed

  1. FSI release: abnormal outside access to the continuous-assessment system found at about 15:00 KST on November 9, 2026 and access blocked; the attacker used a system flaw to get access at the level of the Financial Supervisory Service (press)

Outcome

FSI reported the breach to the FSC and KISA; the FSC began an on-site investigation (press). No decision.

Sources