Broadcasting Media Communications Commission Plans Overhaul of CI Renewal After Shinhan Bank Leak
The Broadcasting Media Communications Commission said it will inspect Shinhan Bank's CI management and pursue rules allowing periodic renewal or leak-triggered changes to the identifier.
South Korea's Broadcasting Media Communications Commission announced it is pushing for institutional improvements that would allow the CI (Connecting Information) identifier to be periodically renewed or changed when it leaks, following the Shinhan Bank customer data leak. Commission Chairman Kim Jong-cheol said in a social media post on October 8, 2026, that measures are being prepared to permit periodic or leak-triggered renewal of CI in order to prevent reuse of leaked identifiers, according to zdnet.co.kr.
Kim said the commission plans to conduct an on-site inspection of Shinhan Bank's CI operation and management practices and will take strict legal action if deficiencies are found. He also emphasized cooperation with credit information and personal information authorities to prevent additional damage from CI leaks.
At the end of last month, Shinhan Bank confirmed that personal and credit information of about 25,000 customers was leaked through a loan recruiter's simple inquiry service. The leaked data included customer names, phone numbers, annual income, calculated limits and other loan application-related information, as well as 66 resident registration numbers and 97 CIs.
Earlier moves on data separation
On June 12, 2026, it was reported that separation storage of resident registration numbers and CI would be mandatory starting January 1 of the following year. On September 18, 2026, it was reported that the separation storage was being moved up by four months following the Lotte Card incident. On April 29, 2026, the Broadcasting Media Communications Commission imposed a fine on Lotte Card for lacking safety measures for personal identification numbers.
Quick answers
What is CI in Shinhan Bank's data leak?
CI stands for Connecting Information, a unique identifier used in South Korea. The Shinhan Bank leak included 97 CIs, and the Broadcasting Media Communications Commission is seeking to allow their periodic renewal or change upon leakage.
How many customers were affected by the Shinhan Bank leak?
Shinhan Bank confirmed that personal and credit information of about 25,000 customers was leaked through a loan recruiter's simple inquiry service at the end of last month.
What action is the Broadcasting Media Communications Commission taking?
Chairman Kim Jong-cheol said the commission plans an on-site inspection of Shinhan Bank's CI management and will pursue institutional improvements for CI renewal, with strict legal action if deficiencies are found.