Three incidents in just over a month
A hacking incident at domestic virtual asset exchange Prabank has exposed the personal information of seven members. Prabank, which suffered two separate security breaches last month, has temporarily suspended its service while it works to address vulnerabilities.
Prabank announced that an unauthorized external intrusion recently caused a security breach, leaking the personal data of seven members, according to Yonhap.
Eight categories of information were compromised: full names, membership details, email addresses, mobile phone numbers, one-time password (OTP) key values, asset balances, personal wallet addresses and login passwords.
Prabank first suffered a hacking incident on Oct. 2, when member personal information was leaked.
Then on Oct. 24, another hacking attack triggered abnormal withdrawals from a hot wallet, with 100 million won ($74,600) worth of assets stolen.
The latest personal data breach is believed to have occurred simultaneously with the Oct. 24 hacking incident.
Prabank said it will notify affected customers individually of the data leak and plans to fully compensate all losses from company assets once the extent of the damage is determined.
"We have reported the incident to the relevant authorities in accordance with applicable laws and are currently investigating the cause and scale of the breach," the company said.
After the series of hacking incidents last month, Prabank discovered additional security vulnerabilities during a system inspection and has suspended its service to strengthen security and upgrade its systems.
hss@heraldcorp.com