Incident record
신한카드
Shinhan Card · Finance
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
~190,288 merchant records
Disclosure recorded
2025-12-23
Sector
Finance
Practical risk
High
What this means
A practical reading of this record
The public record supports a high practical risk level based on the currently reported scope and data categories. This can change if the organisation or regulator updates the record.
- Expect targeted phishing and account-recovery scams. Do not share verification codes with an unsolicited caller.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
Confirmed by the organisation, a regulator, or a documented official decision.
This record concerns alleged internal misuse, not an external hacking incident. The reported count is approximate.
Recorded source · Shinhan Card disclosure and Korean media reporting
Direct source links are being standardised in the source archive. Until then, this page names the current evidence basis rather than substituting a generic link.
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2025-12-23
The most recent dated event currently documented on this page.
Confirmed
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
Company disclosure
Shinhan Card disclosed improper internal use of merchant-owner personal data.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.