The Financial Supervisory Service will soon wrap up its on-site inspection of Shinhan Card, where a franchisee information leak occurred last year. The Financial Supervisory Service launched the on-site inspection late last year to find Shinhan Card's violations related to the data leak. Once the inspection is completed, the Financial Supervisory Service plans to decide whether to impose sanctions on Shinhan Card.
According to financial authorities on Feb. 4, the Financial Supervisory Service has entered the final stage of the on-site inspection of Shinhan Card, which began in late December last year. However, if additional violations are found during the remaining inspection period, the inspection could be extended. Once the inspection of Shinhan Card is completed, the Financial Supervisory Service plans to decide whether to refer the case to the Sanctions Review Committee.
Shinhan Card said on Dec. 23 last year that 192,088 items of personal information, including franchise owners' mobile phone numbers, names, dates of birth, and gender, had been leaked. Twelve Shinhan Card employees are believed to have extracted franchise owners' personal information over the past three years using various methods such as notes, photos, and screenshots, and used it for sales. In response, the Financial Supervisory Service immediately launched an on-site inspection the following day to check the possibility of additional personal credit information leaks and the internal control system related to information security.
The Financial Supervisory Service is also preparing to refer Lotte Card to the Sanctions Review Committee. Lotte Card suffered a hack in Aug. last year that leaked 200GB of internal files. The hack is known to have exposed resident registration numbers of 2.97 million members, CVC (the three-digit number on the back of the card), and internal identification numbers.
The Financial Supervisory Service said, "The inspection of Shinhan Card is expected to end soon, and we see a low possibility of an extension."