KB Capital has suffered a hacking attack that exposed the personal information of 1,811 people, including customers, partner-company employees and its own staff. The company confirmed the breach on 10 November 2026, and the details were reported on 13 November.

Of those affected, 20 are ordinary customers, and the rest are partner-company employees and KB Capital staff. The total identified so far is 1,811, and the company said the final figure could be revised to around 1,800 depending on the results of a further investigation.

What information was exposed

The data exposed for the 20 customers included names, dates of birth, mobile phone numbers, addresses and vehicle registration numbers. For partner-company employees and KB Capital staff, the exposed items included user accounts, names, mobile phone numbers, landline numbers, department names, company names and job titles. Some of the customer information had been stored in the affected system in connection with vehicle leasing and delivery services.

The breached system was KB Capital's vehicle lease asset management system, an internal platform used to manage leased vehicle assets and operated mainly by KB Capital staff and partner-company employees. The company said the system is unrelated to financial transactions, and the items listed as exposed do not include account numbers or payment details.

How the breach was found

KB Capital detected the breach on 10 November after identifying multiple abnormal attempts to look up information from a domestic internet protocol (IP) address. It then took emergency security measures, including suspending operation of the affected system and servers and blocking external access routes, and reported the incident to the Financial Supervisory Service. The company has also strengthened its monitoring of abnormal access.

KB Capital has posted a notice about the breach on its website and set up a service allowing individuals to check whether their data was exposed and which items were affected. The company also said it would provide full compensation for any actual damage resulting from the leak.

Third capital firm hit in a wider wave

KB Capital is the third firm in South Korea's capital finance sector to confirm a data leak. Hyundai Capital said a hacking attack in September exposed the names, contact details and resident registration numbers of 146 mortgage loan agents. At KDB Capital, a breach last month exposed the names, resident registration numbers and dates of birth of 848 customers.

The leaks are part of a wider run of attacks on South Korea's financial sector. The Financial Services Commission said on 5 November that more than 470,000 personal data records had leaked from 37 companies across the sector over the previous month, and it ordered security checks at 580 financial firms to be completed by the end of November. The KB Capital case shows that the leaks have continued despite the inspections, and regulators have stepped up security checks across the industry in response.

People who may be affected can use the check service on KB Capital's website to find out whether their information was exposed. Anyone whose details were among those leaked should watch for phishing messages and unexpected contact that uses their name, phone number or address, and report any suspicious approach to the company.