True
KB Kookmin Bank's internal work systems were hacked, resulting in the leak of personal information belonging to 119 individuals, according to the final ruling issued in the case. The breach involves the bank's business-use systems rather than customer-facing services, and authorities have closed the review with a determination that the incident and its scope are factual.
The incident centered on a hacking attack against KB Kookmin Bank's 업무용 (work-use) systems — the internal infrastructure used by staff for business operations. The attack led to the exposure of personal information of 119 people.
The review of the case examined primary sources covering the breach, and the final determination was that the claim of a work-system hack with 119 people affected is factually accurate. Details of the exact categories of leaked data and the attribution of the attack were not established in the reviewed materials, and the bank's remedial measures were not specified in the sources examined.
The case falls under the oversight framework for financial sector information security, where incidents involving personal data leaks at banks are subject to review by the financial authorities, including the Financial Services Commission. The final ruling in this case was recorded as a finding of fact rather than an unconfirmed allegation.
The finding establishes the breach and the number of affected individuals as fact. Any subsequent enforcement action, compensation, or security upgrades at KB Kookmin Bank remain to be announced.
The claim that a hack of KB Kookmin Bank's work systems leaked the personal information of 119 people is, on the balance of the evidence reviewed, True.