KB Capital breach exposes personal data of 1,811 customers, partners and staff

A Korean news agency reported that KB Capital suffered a hacking incident that compromised personal information of 1,811 individuals, including customers, partner‑company staff and the firm’s own employees.

What happened

The breach was first detected on 10 November 2026 when suspicious data look-ups from domestic IP addresses triggered alerts on the company’s internal automobile‑lease asset‑management system. KB Capital confirmed the intrusion and publicly disclosed the incident three days later, on 13 November 2026.

Data exposed

For customers, the leaked records contain full names, dates of birth, mobile phone numbers, residential addresses and vehicle registration numbers. For partners and employees, the compromised data includes user‑account identifiers, names, phone numbers, department affiliations, company names and job titles.

Response and mitigation

After detecting multiple suspicious data look-ups from domestic IP addresses, KB Capital blocked the access path and tightened monitoring for abnormal access. The firm reported the incident to South Korea’s Financial Supervisory Service and has stepped up monitoring of its IT environment. It also pledged to compensate any damages suffered by the affected parties.

KB Capital warned victims about potential secondary fraud such as identity theft and voice phishing.

Why it matters

The exposed details are sufficient for criminals to craft convincing social‑engineering attacks, especially voice‑phishing scams that exploit personal identifiers. Given the volume of data and the inclusion of vehicle numbers, fraudsters could also target insurance or leasing services.

What you can do

• Monitor bank and credit‑card statements for unfamiliar transactions.
• Be wary of unsolicited calls that reference personal details such as birth dates or vehicle numbers; verify the caller’s identity independently.
• Consider changing passwords for any online accounts that may share the same credentials, and enable two‑factor authentication where possible.
• Report any suspicious activity to your bank and to the Korean Financial Supervisory Service.

Sources

• South Korea: 개인정보 유출 (bing)
• South Korea: 개인정보 유출 (bing)

This brief was prepared with AI assistance from the sources above and reviewed by our editors.