Fake Financial Supervisory Service impersonation48 financial companies leaked a lot of information 사진 확대 The Financial Security Service, an agency dedicated to financial security under the Financial Services Commission, was hacked and hundreds of cases, including personal information of employees of financial companies, were found to have been leaked. The photo shows the information of the Yeouido office of the Financial Investment Center in the lobby of the Financial Investment Center building in Yeouido, Seoul, on the 11th. [Photo = Yonhap News] It has been confirmed that the Financial Security Service, which is in charge of information security in the financial sector, was hacked and more than 850 cases, including personal information and administrative forms of employees of 48 financial companies, were leaked. The hackers were found to have impersonated the Financial Supervisory Service to take out related information. Last year, a hacking accident occurred despite criticism from financial authorities that the management of affiliated websites was insufficient, prompting criticism of the Financial Security Service’s complacent security management.According to the Financial Security Service on the 11th, an information leakage accident occurred due to hacking on the regular evaluation support system, an affiliated website that receives data necessary for evaluating financial companies on the 9th.So far, the leaked information confirmed includes more than 300 personal information, including the names and birth dates of employees of 48 financial companies, 350 covered system user information, and 200 administrative forms, including personal credit information consent forms.Hackers were found to have seized personal information after accessing the system by impersonating the FSS using false accounts. It seems that the Financial Supervisory Service has exploited the fact that it examines the entire financial company’s evaluation data. 사진 확대 The Financial Security Service said, “Security information such as the configuration of the financial company system, or sensitive information such as resident registration numbers and personal credit information have not been leaked.”However, concerns about security capabilities and reliability are growing in that the Financial Security Service, which is in charge of financial security, has been hacked. The financial authorities launched an on-site investigation to find out the exact extent of the hacking damage and the details of the accident.Some point out that the Financial Security Agency’s website management was poor. This is because the Financial Services Commission has already ordered improvements in the management of its affiliated websites last year.In fact, the Financial Security Agency’s comprehensive audit results report last year released by the Financial Services Commission said to improve the vulnerability of LegTech Portal, another affiliated website.The LegTech portal is a site that provides information on various reports and handles complaints from financial companies. However, a vulnerability was discovered that could allow unauthorized persons to access the screen. In response, the Financial Services Commission demanded, “We need to improve the LegTech portal and check it to prevent similar problems from occurring on other websites operated by the Financial Security Service.”The Financial Services Commission also warned that the account of website users who have been unused for a long period of time, retirement, leave, and changes in their duties and departments should be sorted out and their access rights adjusted. This is because a problem has been found that some system users’ authority has not been properly adjusted.In addition, the audit results also included criticism that emergency response plans and disaster recovery simulation training manuals were insufficient.”As a financial security agency, we sincerely apologize for causing concern to financial companies and the people in this accident,” the Financial Security Service said. “We will thoroughly investigate the cause of the accident and re-examine the overall information protection management system.”
Click Here For The Original Source
——————————————————–
