A business system KB Capital uses to manage its vehicle rental assets has come under a hacking attack. The attack leaked the personal information of 1,811 people. Most are employees and staff of partner companies, but 20 ordinary customers are also included.
According to the financial industry on the 13th, KB Capital found traces of abnormal data queries in its vehicle rental asset management system on the 10th. Several suspicious accesses routed through domestic IP addresses were identified. The company immediately blocked access and suspended operation of the system. It reported the incident to the Financial Supervisory Service the same day.
The victims are 20 ordinary customers and 1,791 employees and partner company staff. A company official explained, "Some people may have been counted twice, so the final scale of the leak could shrink." For customers, names, dates of birth, mobile phone numbers, addresses and vehicle numbers were leaked. For staff, user accounts, names, contact details, department names, company names and job titles were included.
The company said the user accounts are merely login IDs such as employee numbers. It explained that no passwords or authentication credentials are included. A company official said, "This was not a hack resulting from the theft of an employee account." The official added, "The abnormal access put a load on the server, so we blocked it immediately and reported it to financial authorities."
The route the attacker used to get in has not yet been revealed. The party behind the attack has not been identified either. It is also unknown who actually used the domestic IP addresses. It has not been determined whether they are linked to IP addresses used in past hacking incidents in the financial sector, or whether artificial intelligence (AI) was used.
The attacked system is used for rental asset management tasks such as vehicle consignment delivery. It is an internal system used by employees and partner company staff. KB Capital explained that the system is unrelated to financial transactions. The company's position is that it will compensate in full if customers suffer damage from the leak. The Financial Supervisory Service is expected to conduct an on-site inspection, taking staffing and other circumstances into account.