Personal data that was stolen from banks in 2013 is being used for phishing scams, according to authorities.

The Seoul Metropolitan Police Agency arrested four members of a voice phishing ring for allegedly extorting a total of 37 million won from victims following the massive data leak in 2013.

Personal data of up to 16,000 Citibank customers was leaked in April 2013. However, the data leak wasn’t discovered until late in 2013, sparking public outrage.

By Park So-eun (spark@heraldcorp.com)