Cyber risk gains ground in Korean financial firms' credit ratings

Cyberattacks are becoming a more consequential credit risk for financial firms, as the damage can extend beyond data theft to operational disruptions and higher funding costs. Korea Ratings is considering more objective ways to measure firms’ exposure to cyber threats, industry officials said Sunday. In a recent report, the ratings agency said cyber risk can weaken both a financial institution’s business prospects and its financial health. International rating agencies have already downgraded companies after cyberattacks disrupted operations or exposed weaknesses in internal controls. In 2019, S&P Global Ratings cut Bank of Valletta’s rating to BBB- from BBB following a cyberattack, citing operational risks and governance weaknesses that hurt its creditworthiness. Korea Ratings has also recently incorporated cyber-related concerns into its assessment of a domestic financial firm. In March, it lowered Lotte Card’s score for the “risk management” factor in its regular credit assessment. Lotte Card disclosed a data breach in August last year that exposed information belonging t