South Korea Says Crypto Exchange Operator Hacked as 16 Financial Firms Hit

Published October 14, 2026, 21:40 UTC. Based on the South Korean Financial Services Commission statement and Reuters reporting, October 14, 2026.

South Korea's Financial Services Commission has confirmed that hacking attacks targeting the country's financial sector have spread to the cryptocurrency industry, naming the operators of two crypto exchanges among 16 financial firms found to have suffered hacking damage. The regulator announced the findings on Wednesday, October 14, 2026, at a second emergency response meeting on the breaches, chaired by FSC Secretary General Shin Jin-chang.

The FSC said five companies were newly confirmed as hacking victims: DB Savings Bank, KDB Capital, Brightfix, Streami and Prabang. The additions lifted the total number of affected financial firms to 16 from 11, spanning the banking, savings bank, mutual finance and virtual asset sectors.

GOPAX operator enters the picture

Streami operates GOPAX, a South Korean cryptocurrency exchange, while Prabang also operates a crypto exchange in the country, according to reporting on the meeting. It is the first time damage tied to the recent wave of attacks on South Korea's financial sector has been confirmed inside the virtual asset industry.

The disclosure came a day after South Korea's financial intelligence unit ordered internet providers to block 27 unregistered crypto exchanges operating in the country, including KuCoin and MEXC, as MABOnChain reported on October 14.

100,000 data leaks, no fraudulent payments found

Authorities said they had identified data leaks totaling about 100,000 cases across the affected firms, but found no information that would raise concerns over direct fraudulent payments. The FSC said financial companies are still checking for intrusions based on shared IP addresses and other indicators of compromise, and that the total number of affected firms could rise further as those checks continue.

Investigators probe whether AI played a role

Financial authorities are conducting an in-depth investigation into the hacking methods to determine whether artificial intelligence was involved, the FSC said in a statement. The commission also said it would run security inspections across financial firms and prepare measures for early detection of hacking threats as well as a joint response framework for the sector.

The Shinhan Bank breach was the starting point

The FSC said the 16 firms were found to have been hit around the time of the recent Shinhan Bank breach. The commission said the total could rise further as financial companies continue checking for intrusions based on shared indicators, it added.

This article is news reporting and is not investment advice.

Sources

• Financial Services Commission (South Korea) statement at the second emergency response meeting, October 14, 2026, primary source for the 16 affected financial firms, the five newly confirmed victims including Streami and Prabang, the 100,000 data leak cases, the absence of confirmed fraudulent payments, the investigation into possible AI involvement, the planned security inspections and early-detection measures, and the Shinhan Bank timeline
• Reuters, October 14, 2026, secondary source for the meeting details, reporting by Jihoon Lee and editing by Ed Davies
• National Cyber Security Consulting, October 14, 2026, secondary source identifying Streami as the operator of the GOPAX cryptocurrency exchange and Prabang as a crypto exchange operator, and noting this is the first confirmed crypto-industry damage in the campaign