Streami and Pravang are among 16 affected financial companies as the FSC outlines plans for a wider security overhaul.

South Korea's Financial Services Commission has named crypto businesses Streami and Pravang among 16 financial companies hit by recent data breaches, alongside major banks.

The FSC's October 14 disclosure lists the two virtual asset businesses alongside Shinhan, Kookmin, Busan and Hana banks and companies in other financial sectors. Streami operates the Gopax exchange; Pravang is the other crypto business named in the release.

The FSC estimated the exposure at about 100,000 pieces of customer data across the affected companies, including names, contact details, resident registration numbers and email addresses. The FSC did not publish a company-level breakdown.

As of the October 14 meeting, authorities had not identified leaked account passwords or credit card numbers, according to the FSC's English release.

The Financial Supervisory Service and Financial Security Institute are investigating the attack methods, whether the incidents are linked, whether a common attacker was responsible and whether AI was used. The number of affected firms could also rise as companies check their systems against attacker IP addresses shared by authorities.

A wider security check found weaknesses beyond the confirmed breach list. All 555 companies completed a 12-point checklist by October 8, with 425 reporting their arrangements were appropriate and 130 reporting areas needing improvement. The checklist was a sector-wide self-assessment.

The shortcomings were mainly in security patches and monitoring systems. Reported gaps included missing software updates, weak management of systems no longer supported by their vendors, absent round-the-clock monitoring and weaknesses in authentication or access controls.

Source link