NIS asks 2,100 public institutions to conduct emergency cybersecurity checks

The National Intelligence Service (NIS) asked 2,100 public institutions in South Korea to conduct emergency cybersecurity inspections Tuesday after cyberattacks on financial firms exposed customer data. Central government agencies and local governments are to check their security using an NIS checklist, while the agency plans separate vulnerability assessments of critical public-sector infrastructure, expected to be completed by mid-November. The NIS highlighted the need to manage potential attack entry points, operate security monitoring systems and apply security patches.

The financial-sector attacks last month exposed about 100,000 cases of personal information, including email addresses, names and phone numbers.

The NIS plans to assess critical information and communications infrastructure in the public sector under its jurisdiction.

The agency is also directly assessing internet-facing systems at public-sector facilities designated as critical information and communications infrastructure.

The NIS checklist calls for attention to potential cyberattack entry points, security monitoring systems and security patches.

Published Nov 3, 2026 12:12 pm KST

National Intelligence Service head office / Yonhap

Korea's spy agency has asked 2,100 public institutions to conduct emergency cybersecurity inspections following a series of cyberattacks on financial firms that resulted in customer data breaches, government sources said Tuesday.

The National Intelligence Service (NIS) has called on the central government agencies and local governments to carry out their own security checks based on a checklist, the sources said.

Separately, the NIS plans to conduct its own vulnerability assessments of critical information and communications infrastructure in the public sector under its jurisdiction, the sources said. The assessments are expected to be completed by mid-November.

Local financial institutions, including banks, savings banks and insurance companies, were hit by a series of cyberattacks last month, exposing about 100,000 cases of personal information across the industry, including email addresses, names and phone numbers.

The NIS has called for particular attention to be paid to the management of potential cyberattack entry points, the operation of security monitoring systems and the application of security patches.

Separately, the agency is conducting direct vulnerability assessments of internet-facing systems at public-sector facilities designated as critical information and communications infrastructure.

韩国国家情报院（NIS）周二要求韩国2100家公共机构进行紧急网络安全检查，此前多家金融公司遭受网络攻击，导致客户数据泄露。中央政府机构和地方政府将使用NIS提供的检查清单检查自身安全状况，同时，NIS还计划对关键公共部门基础设施进行单独的漏洞评估，预计将于11月中旬完成。NIS强调，必须加强对潜在攻击入口点的管理，运行安全监控系统，并及时应用安全补丁。

上个月金融领域的攻击泄露了约 10 万条个人信息，包括电子邮件地址、姓名和电话号码。

国家信息安全局计划对其管辖范围内的公共部门的关键信息和通信基础设施进行评估。

该机构还在直接评估被指定为关键信息和通信基础设施的公共部门设施中面向互联网的系统。

NIS 清单要求关注潜在的网络攻击入口点、安全监控系统和安全补丁。

发布于2026年11月3日下午12:12（韩国标准时间）

国家情报院总部/韩联社

韩国政府消息人士周二表示，在发生一系列针对金融公司的网络攻击导致客户数据泄露后，韩国情报机构已要求 2100 家公共机构进行紧急网络安全检查。

消息人士称，国家情报局（NIS）已要求中央政府机构和地方政府根据检查清单开展各自的安全检查。

消息人士称，此外，国家情报局计划对其管辖范围内的公共部门关键信息和通信基础设施进行漏洞评估。预计评估工作将于11月中旬完成。

上个月，包括银行、储蓄银行和保险公司在内的当地金融机构遭受了一系列网络攻击，导致整个行业约 10 万起个人信息泄露事件，其中包括电子邮件地址、姓名和电话号码。

国家信息安全局呼吁特别关注潜在网络攻击入口点的管理、安全监控系统的运行以及安全补丁的应用。

此外，该机构正在对指定为关键信息和通信基础设施的公共部门设施中面向互联网的系统进行直接脆弱性评估。