Ransomware hits servers at Korean IT provider Hanil Networks; regulators tell financial clients to self-check

Boannews reports that ransomware hit some servers managed by Hanil Networks, the IT infrastructure subsidiary of UBase Group, on November 2, 2026, and the company says it blocked the attack immediately and found no sign that important data, including personal data, leaked ^[1]. The report says Hanil Networks restored its databases and SK Shieldus confirmed normal operations, and while some claimed a large card company was affected, that company says it found no compromise, as financial regulators reportedly ordered all financial firms to check for damage ^[1]. Financial firms that use Hanil Networks should complete the regulator-ordered self-inspection and submit results to confirm their systems were not affected ^[1].

Industries mainly affected: Finance, Technology

Financial firms that use Hanil Networks should complete the regulator-ordered self-inspection and submit results to confirm their systems were not affected ^[1]