hana-bank-2026 · Disclosed 2026-10-03
Hana Bank: unauthorized intrusion into a sales-support system
On October 2 the bank identified signs that a September 30 intrusion into its sales-support system had leaked data on 89 customers; the exact entry method is undisclosed.
Outcome: Confirmed breach
Entry path and evidence
- Reported fact
The bank reports a September 30 sales-support system intrusion and October 2 confirmation of signs of leakage affecting 89 customers.
[s1]本文 第2段落 - Reported fact
Reported leaked fields include names, resident registration numbers, addresses, email/telephone/mobile details and employer names.
[s1]本文 流出項目
Timeline
Reported response
- Reported fact
Blocked external IP access, applied additional safeguards and increased 24-hour monitoring.
[s1]本文 第3段落
Cause and mitigation hypotheses
Not assessed. Editorial hypotheses have not been added for this incident; this does not establish safety or a confirmed cause.
Evidence relevant to prevention
Insufficient evidence
The exact entry method and prior controls are unresolved. Inspect exposure, privileges and logs using the linked rules.
Editorial assessment; not a determination of liability. [s1]
Unknowns and AI involvement
The reviewed primary evidence does not establish attacker AI use in this incident.
October 2 is customer notification; October 3 is the reviewed public notice. An earlier public disclosure date, specific flaws, shared attribution and AI use remain unconfirmed.
Sources
[s1] ハナ銀行 · Primary source
개인(신용)정보 유출 관련 안내 및 사과문 ↗Published 2026-10-03 · Reviewed 2026-10-26
[s2] 韓国金融委員会 · Primary source
금융권 침해사고 재발방지를 위해 금융보안 관리체계를 전면 강화하겠습니다. ↗Published 2026-10-14 · Reviewed 2026-10-26