[Asia Economy Reporter Lee Jung-yoon] The Financial Supervisory Service imposed a disciplinary action of institutional caution and a fine of 120 million KRW on Eugene Investment & Securities for violating obligations to ensure the safety of electronic financial transactions.
According to the financial sector on the 5th, the Financial Supervisory Service detected violations by Eugene Investment & Securities regarding non-compliance with management measures for public web servers such as their homepage and failure to comply with hacking prevention measures. Accordingly, the disciplinary action was taken, including a warning to one executive and reprimands to two employees. One retired employee received a measure equivalent to a reprimand.
Eugene Investment & Securities neglected security management measures for public web servers, resulting in information leakage due to hacking attacks exploiting vulnerabilities in the web servers. Additionally, although abnormal service requests were detected by the web firewall, they were not monitored and thus not blocked.
Furthermore, an external attacker who infiltrated the internal communication network distributed malware disguised as update files, infecting internal communication network servers and PCs with malware.
© The Asia Business Daily(www.asiae.co.kr). All rights reserved.
