[Financial News] Amid growing threats of personal information theft through the misuse of artificial intelligence (AI), including recent large-scale hacking incidents in the financial sector, the Personal Information Protection Commission (PIPC) urged people to follow privacy-protection practices, such as closing accounts on sites they no longer use and using two-factor authentication. It also recommended that companies and institutions clean up abandoned systems and proactively check for security vulnerabilities.Amid growing threats of personal information theft through the misuse of artificial intelligence (AI), including recent large-scale hacking incidents in the financial sector, the Personal Information Protection Commission on the 19th announced privacy-protection guidelines, urging people to follow them by closing accounts on sites they no longer use and using two-factor authentication. It also recommended that companies and institutions clean up abandoned systems and proactively check for security vulnerabilities./Photo: Newsis On the 19th, the PIPC announced personal information protection practices for the public, companies and institutions to follow to prevent hacking that exploits AI and secondary harm caused by personal information leaks. “Close accounts on sites you don’t use and use two-factor authentication,” PIPC advises The PIPC stressed that members of the public should clear out unused accounts and actively use two-factor authentication if the sites they use offer it. It also recommended that anyone notified of a data leak at a particular site immediately change the passwords on other sites where they use the same password as the one that was exposed.The PIPC also advised people to use the “Find My Leaked Information” service to check whether their personal information has been exposed. If it has, they should call 118; for voice phishing or smishing, 1394; and for financial losses due to phishing or similar scams, contact 112 or the customer service center of the relevant financial institution to request a payment suspension. “Companies and institutions should inventory information assets under their management and clean up abandoned systems” The PIPC urged companies and institutions to “inventory all information assets under their management and remove any systems left unused after their service life has expired.” They should identify their servers, storage devices (NAS), network equipment, terminals and installed software, as well as the types and volume of personal information processed by each system and how each is connected to external systems. It stressed that temporary and test systems, websites and accounts should also be thoroughly checked and decommissioned, and that unnecessary external access ports should be blocked. It also recommended carefully identifying and decommissioning systems that are unused or have been left unattended for a long time.Lee Jung-ryul, vice chair of the PIPC, said, “Protecting personal information requires both responsible safeguards by companies and institutions and everyday efforts by individuals,” and urged them to “check for vulnerabilities in advance and do their part to reduce personal information leaks and secondary harm.”[email protected] Lee Gu-sun Reporter
Click Here For The Original Source.
——————————————————–
