South Korea names two crypto firms in breach wave that also hit major banks
South Korea’s Financial Services Commission named crypto firms Streami, which operates Gopax, and Pravang among 16 financial companies affected by recent data breaches. The incidents exposed an estimated 100,000 customer records across the firms, including personal and contact information; authorities had not identified leaked passwords or credit card numbers. Investigators are examining how the attacks occurred, whether they were connected, and whether AI was involved. A sector-wide self-assessment also found security weaknesses at 130 of 555 companies, especially in patching, monitoring and access controls. The FSC outlined proposed measures including more frequent vulnerability testing, faster threat-information sharing, stronger executive accountability and added support for smaller firms. The proposals’ scope and implementation schedule remain unsettled, and it is unclear which would apply to virtual asset businesses.
