KB Capital confirmed that an external malicious attack exposed personal information belonging to 1,811 people, including 20 customers, partner-company employees and its own staff. The breach involved the company’s vehicle lease asset management system, which KB Capital said is unrelated to financial transactions. Exposed customer information included names, dates of birth, mobile numbers, addresses and vehicle registration numbers. Data involving partner companies and employees included user accounts, names, mobile numbers, telephone numbers, department names, company names and job titles. KB Capital suspended the affected systems and servers, blocked the access route, reported the incident to the Financial Supervisory Service and strengthened abnormal-access monitoring. It also created a website service for checking exposure, warned about identity theft, voice phishing and pharming, and said customers could seek relief through damages claims or the Personal Information Dispute Mediation Committee. The company pledged full compensation for losses caused by the leak. The incident follows confirmed breaches at Hyundai Capital and KDB Capital.