South Korean financial institutions hit by AI-linked hacking attacks

AI-driven cyberattack financial data breach South Korean banking sector personal information leak cybersecurity

A series of coordinated hacking attacks has targeted the South Korean financial sector, affecting seven major institutions including Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Yegaram Savings Bank, Welcome Savings Bank, and Hyundai Capital. The breaches have resulted in the leak of significant amounts of personal data, including names, phone numbers, resident registration numbers, and sensitive financial details such as annual income and loan limits.

Investigators suspect the use of artificial intelligence (AI) agents to automate the discovery of vulnerabilities and execute the attacks. Traces of ARTEX, a Chinese-language AI autonomous penetration testing platform, were identified during the investigation. Rather than targeting core banking transaction systems, the attackers focused on peripheral, less-secure systems such as employee mobile support tools, loan solicitor inquiry services, and external web pages.

In response, President Lee Jae-myung has ordered a thorough investigation, and financial authorities have launched emergency security inspections across approximately 500 financial institutions. The Financial Services Commission and Financial Supervisory Service are working to identify all exposed IT assets and strengthen access controls to prevent secondary damages like voice phishing and identity theft.

Entities

ARTEX · Financial Services Commission · Financial Supervisory Service · Hana Bank · KB Kookmin Bank · Lee Eok-won · Lee Jae Myung · Lee Jae-myung · Shinhan Bank · South Korea

Claims

What the coverage asserts, and how many sources carry each claim.

[● 27 SOURCES] Hackers are suspected of using AI agents to launch widespread attacks across major banks, savings banks, and capital companies. www.blockmedia.co.kr · www.kyeonggi.com · www.namdonews.com · www.sisajournal.com · www.womennews.co.kr · +16 more
[● 28 SOURCES] The attacks primarily targeted vulnerable external web pages and servers used by loan solicitors and employees for work convenience. www.sisajournal.com · www.blockmedia.co.kr · www.ithome.com · www.mbn.co.kr · www.kyeonggi.com · +17 more
[DISPUTED] KB Kookmin Bank confirmed the leak of 153 items of information, including 119 customers. www.ithome.com · www.womennews.co.kr · www.dailymagazine.co.kr · www.europesays.com · socialvalue.kr · +2 more
[● 8 SOURCES] Financial authorities are conducting emergency inspections across approximately 500 financial institutions. www.blockmedia.co.kr · www.kyeonggi.com · www.namdonews.com · socialvalue.kr · www.imaeil.com · +2 more
[● 10 SOURCES] Hyundai Capital recognized the leak of names, contact information, email addresses, and resident registration numbers for 146 loan solicitors. www.womennews.co.kr · www.namdonews.com · socialvalue.kr · blockchainseoul.kr · www.epochtimes.com · +2 more
[● 13 SOURCES] Shinhan Bank reported that 25,727 pieces of personal information were leaked. www.ithome.com · www.womennews.co.kr · socialvalue.kr · www.europesays.com · blockchainseoul.kr · +4 more
[● 5 SOURCES] Traces of ARTEX, a Chinese-language AI autonomous penetration testing platform, were identified in the attacks. www.namdonews.com · www.epochtimes.com · www.hidomin.com · www.ilyo.co.kr
[● 10 SOURCES] Yegaram Savings Bank announced that the names, dates of birth, and contact information of about 40,000 customers were leaked. www.womennews.co.kr · socialvalue.kr · www.chosunonline.com · www.epochtimes.com · blockchainseoul.kr · +2 more