South Korea FSC to tighten cybersecurity rules after 130 financial — SkimNews

Get the Finance newsletter
Daily finance — markets, central banks, M&A, the prints that move money. Free.
- FSC conducted an industry-wide review of 555 financial companies and identified cybersecurity deficiencies at 130 of them.
- The investigation found roughly 100,000 pieces of customer information exposed across affected firms, including names, contact details, and identification numbers.
- Earlier security incidents involved 16 companies, including crypto exchange Gopax operator Streami and trading platform Prabang, which disclosed an Oct. 2 hack that exposed some customers' personal information.
- Larger financial institutions would face vulnerability assessments at least twice per year under the proposed reforms, along with stronger executive accountability.
- The FSC plans to enhance information-sharing systems and is considering deploying AI-based security monitoring for smaller companies.
- Regulators are weighing authority to trigger extra cybersecurity inspections outside regular schedules when urgent threats emerge.
- The FSC said it is still investigating whether the incidents involved AI or were linked to the same attackers.
Why it matters: Roughly one in four South Korean financial firms reviewed — 130 of 555 — showed cybersecurity deficiencies, with 100,000 customer records exposed in the incidents, giving the FSC clear legislative justification to mandate biannual vulnerability checks, executive accountability measures, and AI-driven monitoring for smaller firms that previously escaped frequent scrutiny.
Ask SkimNews



