INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

South Korea probes bank breaches amid suspected AI-powered cyber attacks

| 2026-10-05 14:22 HIGH LOW AI-ENABLED ATTACK · AUTONOMOUS
JSON
Executive Summary
AI-generated
South Korea is investigating a series of cyberattacks targeting financial institutions, with suspected AI-powered attacks being the primary cause. The Financial Services Commission (FSC) held an emergency meeting following the breaches at Shinhan Bank and Kookmin Bank, which hold over $800 billion in assets combined. Authorities have launched on-site investigations and are sharing information with relevant agencies, including Korea's data protection agency, to inspect IT systems, reduce unnecessary information exposure, and improve authentication controls. President Lee has ordered a thorough investigation into personal data leaks at financial and public institutions, following reports that Shinhan Bank leaked the details of 25,000 customers and Kookmin Bank leaked credit card information of 119,000 clients. The use of AI-powered attack automation tools is suspected in the breaches, with some analysts believing it to be ARTEX AI, an open-source penetration-testing system used by threat actors.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance governmentgovernment mediamedia
Incident Timeline
‎2026/10/04
South Korea's President Lee ordered a thorough investigation into personal data leaks at financial and public institutions amid reported breaches.
target_region Korea, Republic of
Yesterday, local media outlets reported that South Korea's President Lee ordered a thorough investigation into personal data leaks at financial and public institutions.
industry Media
Yesterday, local media outlets reported that South Korea's President Lee ordered a thorough investigation into personal data leaks at financial and public institutions.
‎2026/10/05
Authorities launched on-site investigations after receiving incident reports and shared all actionable information with relevant agencies, including KISA.
organisation Financial Services Commission
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country.
organisation FSC
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country.
organisation Shinhan Bank
During the meeting, officials confirmed a data breach at Shinhan Bank and said other cybersecurity incidents affected other South Korean banks, including Kookmin Bank.
organisation Kookmin Bank
During the meeting, officials confirmed a data breach at Shinhan Bank and said other cybersecurity incidents affected other South Korean banks, including Kookmin Bank.
organisation KB Kookmin Bank
Shinhan Bank and KB Kookmin Bank are large private South Korean commercial banks, each holding more than $400 billion in assets.
financial $400 banks
Shinhan Bank and KB Kookmin Bank are large private South Korean commercial banks, each holding more than $400 billion in assets.
organisation KISA
Authorities said they launched on-site investigations after receiving incident reports and shared all actionable information with relevant agencies, including KISA (Korea's data protection agency).
organisation Hana Bank
At the same time, Hana Bank was also found to have suffered a limited-scope breach after its sales-support system was compromised.
organisation HTML
AI-powered attacks suspected While official channels provided no details about the perpetrators, Korean news agency Yonhap reported that a server used in the attacks had an HTML page title containing a Chinese-language string associated with ARTEX AI.
organisation NFL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
organisation CHANEL
Join Mikko Hyppönen and security leaders from the NFL, CHANEL, and Atlassian for a two-hour digital summit on what AI-speed attacks change, what defenders should stop doing, and how to validate, decide, fix, and re-validate at machine speed.
victims 25,000 customers
According to the same reports, Shinhan Bank leaked the details of 25,000 customers, while Kookmin Bank leaked credit card information of 119,000 clients.
victims 119,000 clients
According to the same reports, Shinhan Bank leaked the details of 25,000 customers, while Kookmin Bank leaked credit card information of 119,000 clients.
Tactical Metrics
Metrics
financial
400,000,000,000
Financial Impact / Stolen Funds
Shinhan Bank and KB Kookmin Bank are large private South Korean commercial banks, each holding more than $400 billion in assets.
Metrics
victims
25,000
Customers
According to the same reports, Shinhan Bank leaked the details of 25,000 customers, while Kookmin Bank leaked credit card information of 119,000 clients.
Metrics
victims
119,000
Clients
According to the same reports, Shinhan Bank leaked the details of 25,000 customers, while Kookmin Bank leaked credit card information of 119,000 clients.
Intelligence Sources
BleepingComputer 2026-10-05