KB Capital Reports Data Breach Affecting 1,820 Individuals

KB Capital has confirmed a security breach resulting in the unauthorized access and exfiltration of personal data belonging to approximately 1,820 individuals. The compromised group includes 20 customers and 1,800 employees and contractors.

The incident was identified on November 10 following the detection of suspicious data query attempts originating from domestic internet protocol (IP) addresses. The company subsequently blocked the unauthorized access points and implemented enhanced monitoring protocols to prevent further intrusion.

Exfiltrated data for customers includes names, dates of birth, mobile phone numbers, residential addresses, and vehicle registration numbers. For employees and contractors, the compromised information includes user account credentials, names, contact details, department affiliations, and job titles.

KB Capital

The breach occurred within the company’s vehicle lease asset management system. KB Capital has stated that the affected system is separate from core financial transaction infrastructure, asserting that no banking or financial transaction data was compromised in the attack.

The company has formally reported the incident to the Financial Supervisory Service. Management has committed to providing full compensation for any damages resulting from the data exposure. Security teams are currently conducting a forensic analysis to determine the full scope of the vulnerability and to prevent recurrence.