Boannews reports KB Capital said its vehicle lease asset management system was hit by a malicious attack confirmed on November 10, leaking personal data of 1,811 customers, partner-company staff and employees, 20 of them ordinary customers; the company said the system is unrelated to financial transactions [1]. Yonhap Infomax reports KB Capital found suspicious access traces from multiple domestic IP addresses while handling a server load issue, shut down the system and servers to block access, and reported to financial authorities [2]. Affected people can check exposed items via the data-leak lookup menu on KB Capital's website, avoid clicking URLs in unknown texts posing as identity verification, and refuse to enter personal or financial details for contacts impersonating KB Capital or couriers [1].
South Korea's KB Capital vehicle-lease management system breached, exposing data of 1,811 customers and partner staff
1 min read
- Disclosed
- Nov 12, 2026
- Published
- Nov 13, 2026
- Last updated
- Nov 13, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Finance
What to do nowOur advice
- Check which of your items leaked via the data-leak lookup menu on KB Capital's website [1].
- Do not click URLs in unknown text messages posing as identity verification .
Timeline
Technical details
Remediation
References
Media2
- [1]보안뉴스2026-11-13Accessed 2026-11-13Snapshot 2026-11-13 sha256 cebc5772504b
“KB캐피탈은 악의적 공격으로 10일 고객과 협력사, 임직원의 개인정보가 유출된 사실을 확인했다고 13일 공지했다.”
- [2]Yonhap Infomax2026-11-13Accessed 2026-11-13Snapshot 2026-11-13
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.