Financial firms added fewer than 100 cybersecurity staff in a year, with over a third making no additions

Amid growing alarm over AI-powered hacking attacks targeting the financial sector, the total number of information security personnel across the industry grew by fewer than 100 over the past year, data showed Tuesday. More than one in three firms made no additions to their security headcount at all, raising urgent questions about the sector's cybersecurity readiness.

According to data submitted to People Power Party lawmaker Lee Yang-su by the Financial Supervisory Service, cybersecurity staffing at domestic banks, insurers, card companies, life insurers, non-life insurers and securities firms rose 6.9 percent, from 1,331 at the end of 2024 to 1,423 at the end of 2025. Of the 34 companies surveyed, 22 increased their security headcount.

Among banks, Woori Bank recorded the largest increase, adding 27 staff to bring its total from 74 to 101. Hana Bank grew from 69 to 79, and NH NongHyup Bank from 114 to 118. KB Kookmin Bank and Shinhan Bank, however, saw their security headcounts decline.

Samsung Card expanded its cybersecurity team from 37 to 49, Samsung Fire from 58 to 62, and Mirae Asset Securities from 33 to 38.

The recent hacking incidents are expected to push financial firms to accelerate hiring of information security specialists.

Hana Bank has begun recruiting experienced professionals to build and operate AI and blockchain security frameworks and conduct threat analysis. Hana Financial Group has also established an integrated security operations center at its Cheongna headquarters to oversee group-wide cybersecurity.

Shinhan Bank is seeking experienced hires to develop tools that use AI to diagnose vulnerabilities and analyze source code. NH NongHyup Bank last month began recruiting white-hat hackers and specialists in open-source vulnerability analysis, security architecture design and security data analysis. Industrial Bank of Korea has also been hiring cybersecurity professionals through rolling recruitment postings last month.

"The current trend in information security is toward building automated infrastructure, so sheer headcount alone may not determine the quality of a firm's security," an industry official said. "Still, the shock of these recent hacking incidents will likely push each company to expand its security workforce further."