Seoul: Major card issuer Shinhan Card Co. revealed a significant data breach involving more than 190,000 cases of business and personal data leaks from partnered merchant operators. The company assured that there is no concern about further dissemination of the leaked information.
According to Yonhap News Agency, Shinhan Card has informed the Personal Information Protection Commission about the breach, emphasizing that it was not a result of hacking. The data leak was allegedly due to employee misconduct, with some employees using the data for new card solicitations.
The leaked information includes mobile phone numbers, names, and dates of birth of merchant representatives. Shinhan Card clarified that no sensitive personal data such as resident registration numbers, card numbers, or bank account information were compromised.
The company also confirmed that the data leak does not involve any personal information of general, individual customers. The misconduct appears to be linked to employees aiming to enhance their performance in recruiting new cardholders, involving at least 12 employees from over five sales offices.
Shinhan Card stated that the involved employees have been relieved of their duties, and the company is contemplating filing criminal complaints. An official from the company highlighted that the data was improperly provided to solicitors without marketing consent, reiterating that the breach was not due to hacking or external intrusion.
While no damage from the leaked information has been identified so far, Shinhan Card promised to actively compensate any victims should any damages be reported.