INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

AI Hacking Hits 16 Financial Institutions with Leaked Personal Data

| 2026-10-14 15:32 MEDIUM LOW AI-ENABLED ATTACK · AUTONOMOUS DATA BREACH
JSON
Executive Summary
AI-generated
On October 14, 2026, a series of AI hacking attacks on the financial sector resulted in information breaches at 16 financial institutions, including banks and savings banks. The affected entities include DB Savings Bank, Hyundai Capital, PFCT, Brightpick, Streamy, Prabang, Saemaul Mutual Savings Bank Association, Shinhan, KB Kookmin, Busan, Hana, Yegalam, Welcome, OK, and others. According to the Financial Services Commission, a total of 100,000 personal data cases were leaked in this incident. The attack works by exploiting vulnerabilities in financial institutions' security systems, allowing hackers to access sensitive information such as name, contact information, resident registration number, and email addresses. Currently, financial authorities are verifying the occurrence of the incident based on shared internet addresses (IP addresses), with 130 institutions found to have insufficient matters during an urgent inspection conducted by the Financial Supervisory Commission's Office.
Technical Mitigations AI-generated
• Patch the vulnerabilities in Shinhan, KB Kookmin, Busan, and Hana banks by addressing the security weaknesses identified during the Financial Supervisory Commission's inspection. • Implement IP address blocking to prevent further attacks on financial institutions that have experienced breaches for the first time through this announcement. • Use a more robust system to verify the occurrence of incidents based on shared internet addresses (IP addresses) and consider implementing additional verification methods.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance
Incident Timeline
‎2026/10/14
Threat actors used AI hacking to target 16 financial institutions, resulting in the leakage of approximately 100,000 personal data cases.
organisation DB Savings Bank
This is the first time that the information breaches at DB Savings Bank and San Capital have been publicly disclosed, and five more institutions have also been revealed to have experienced breaches.
data_breach 100,000 data cases
AI hacking hits 16 financial institutions, with a total of 100,000 personal data cases leaked.. Recent AI hacking attacks on the financial sector have resulted in information breaches at 16 financial institutions, including banks and savings banks, as well as virtual asset and electronic financial companies.
organisation Hyundai Capital
The affected institutions can be categorized into the following: banks (Shinhan, KB Kookmin, Busan, and Hana), savings banks (Yegalam, Welcome, DB, and OK), loan companies (Hyundai Capital and San Capital), online investment-linked financial companies (PFCT and Mouda), electronic financial companies (Brightpick), virtual asset businesses (Streamy and Prabang), and mutual banks (Saemaul Mutual Sa…
organisation PFCT
The affected institutions can be categorized into the following: banks (Shinhan, KB Kookmin, Busan, and Hana), savings banks (Yegalam, Welcome, DB, and OK), loan companies (Hyundai Capital and San Capital), online investment-linked financial companies (PFCT and Mouda), electronic financial companies (Brightpick), virtual asset businesses (Streamy and Prabang), and mutual banks (Saemaul Mutual Sa…
organisation Brightpick
The affected institutions can be categorized into the following: banks (Shinhan, KB Kookmin, Busan, and Hana), savings banks (Yegalam, Welcome, DB, and OK), loan companies (Hyundai Capital and San Capital), online investment-linked financial companies (PFCT and Mouda), electronic financial companies (Brightpick), virtual asset businesses (Streamy and Prabang), and mutual banks (Saemaul Mutual Sa…
organisation Streamy and Prabang
The affected institutions can be categorized into the following: banks (Shinhan, KB Kookmin, Busan, and Hana), savings banks (Yegalam, Welcome, DB, and OK), loan companies (Hyundai Capital and San Capital), online investment-linked financial companies (PFCT and Mouda), electronic financial companies (Brightpick), virtual asset businesses (Streamy and Prabang), and mutual banks (Saemaul Mutual Sa…
organisation Saemaul Mutual Savings Bank Association
The affected institutions can be categorized into the following: banks (Shinhan, KB Kookmin, Busan, and Hana), savings banks (Yegalam, Welcome, DB, and OK), loan companies (Hyundai Capital and San Capital), online investment-linked financial companies (PFCT and Mouda), electronic financial companies (Brightpick), virtual asset businesses (Streamy and Prabang), and mutual banks (Saemaul Mutual Sa…
organisation IP
Financial authorities stated that "currently, financial institutions are verifying the occurrence of the incident based on shared internet addresses (IP addresses), so the number of affected financial institutions can be expanded."
organisation the Financial Supervisory Commission's
Shin-Jang Chang, Director of the Financial Supervisory Commission's Office, stated, "I will pursue fundamental system reform of the financial authority's security system."
Tactical Metrics
Metrics
data_breach
100,000
Data Cases
AI hacking hits 16 financial institutions, with a total of 100,000 personal data cases leaked.. Recent AI hacking attacks on the financial sector have resulted in information breaches at 16 financial institutions, including banks and savings banks, as well as virtual asset and electronic financial companies.
Intelligence Sources
Chosun Economy 2026-10-14