Woori Bank Says NFT Data Leak Has Limited Financial and Operational Impact

Woori Bank has determined that the recent incident involving the leakage of personal information during the development of an NFT platform will have only limited impact on its finances and business operations.

According to a disclosure filed by Woori Bank on July 16, the bank reported the data breach under the category of 'IT and security-related issues such as personal data leaks or system outages' in its investment prospectus. The incident involved an external development company that handled an NFT platform project from 2023 to 2026.

The bank disclosed that a former employee of the external developer inadvertently leaked 17,551 user records due to poor management and negligence in July 2026. The exposed data included user nicknames and connection information (CI), but not passwords or financial transaction details.

Woori Bank clarified that user nicknames are not linked to login credentials or account IDs, and no sensitive information such as passwords or financial transactions were compromised. Upon discovering the breach, the bank immediately blocked access through the external developer, and no further misuse of the leaked data has been reported since then.

The bank concluded that the incident is unlikely to significantly affect its financial or business operations but emphasized the need for ongoing review of information security management practices among IT outsourcing partners.