GOPAX Operator Streami Among 16 Firms Hit in South Korea Hack

South Korea's Financial Services Commission said 16 financial companies were confirmed to have suffered hacking incidents around the time of the Shinhan Bank breach, and two of them are crypto businesses: Streami, which operates the GOPAX exchange, and Prabang.

The FSC put the confirmed leaks across those 16 companies at about 100,000 records, covering names, contact details, resident registration numbers and emails. It said no leaked information such as account numbers or card numbers, the kind that could create a direct risk of fraudulent payments, had been identified. On the regulator's own account, this reads as an identity-data problem rather than a drain on customer balances at the firms named so far.

The 16 Companies, by Sector

The FSC lists the companies under banking, savings banks, mutual finance, credit finance, electronic finance, online investment and virtual asset businesses.

• Virtual asset businesses: Streami, which runs GOPAX, and Prabang.
• Banks: Shinhan, Kookmin, Busan and Hana.
• Savings banks: Yegaram, Welcome, DB and OK.
• Credit finance: Hyundai Capital and KDB Capital.
• Electronic finance: Brightfix.
• Online investment: PFCT and one other firm.
• Mutual finance: one central federation.

The two crypto names sit in the same wave as the bank breaches. Korean reports describe Prabang as the first exchange to have had its virtual asset service provider renewal report accepted.

What the FSC Has Not Released

The release gives no company-by-company breakdown, so how much data, or which items, left Streami, GOPAX or Prabang has not been published. GOPAX is reported to be assessing the scale of its damage.

That gap matters more for crypto readers than for bank customers, because exchange accounts hold assets, not just records. Nothing in the FSC's account so far describes losses of funds at either company.

No Word Yet on One Attacker, or AI Hacking

The FSC said it cannot yet tell whether the incidents share the same actor. It is checking intrusion routes and attack methods, including whether AI hacking was involved, based on on-site inspections by the Financial Supervisory Service and the Financial Security Institute. It also said the number of affected companies could rise, because firms are still checking for intrusions using shared IP addresses and other indicators.

The Shinhan Breach Behind the Count

The count follows the Shinhan Bank breach. The FSC chaired an emergency response meeting on October 2 and an all-sector emergency inspection meeting on October 4, then a second emergency response meeting on October 14 at 15:00 at the Government Seoul Complex, led by Secretary General Shin Jin-chang, with the FSS, the Financial Security Institute, the science ministry, the interior ministry, the personal information protection commission, the police and KISA.

A separate check of all 555 financial companies against a 12-item checklist wrapped up on October 8. Of those, 425 reported as adequate, and 130 flagged deficiencies, mostly one or two items covering security patches and monitoring systems.

For crypto holders, the next thing to watch is whether the FSC separates the two exchanges from the 100,000-record total, and whether 16 becomes a larger number. Separately, Korean authorities have moved to block 27 crypto sites, including KuCoin and MEXC.