INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

AI Hacking Hits 16 Financial Institutions with Personal Data Leaks

| 2026-10-14 06:59 MEDIUM LOW AI-ENABLED ATTACK · AUTONOMOUS DATA BREACH
JSON
Executive Summary
AI-generated
A series of AI hacking attacks on the financial sector have resulted in information breaches at 16 financial institutions, including banks and savings banks, as well as virtual asset and electronic financial companies. The leaked personal information is estimated to be over 100,000 cases, with details including name, contact information, resident registration number, and email addresses. According to the Financial Services Commission, which was informed on October 14th, a total of 16 financial institutions have been confirmed to have experienced information breaches before and after the incident. The attacks work by exploiting vulnerabilities in outdated systems and lack of real-time security monitoring, allowing hackers to access sensitive information through shared internet addresses (IP addresses). Currently, financial authorities are verifying the occurrence of cyber attacks based on IP addresses, with 130 institutions found to have inadequate matters during an urgent inspection conducted by the Financial Services Commission.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance
Incident Timeline
‎2026/09/14
Threat actors exploited vulnerabilities in 12 security items at 555 financial institutions, resulting in the leak of personal information from 100,000 cases and losses to 16 locations.
general_metric 12 security items
The financial authorities conducted an urgent inspection of 12 security items on 555 financial institutions, which ended on the 8th of last month, and found that 130 institutions had inadequate matters.
general_metric 555 financial institutions
The financial authorities conducted an urgent inspection of 12 security items on 555 financial institutions, which ended on the 8th of last month, and found that 130 institutions had inadequate matters.
general_metric 130 institutions
The financial authorities conducted an urgent inspection of 12 security items on 555 financial institutions, which ended on the 8th of last month, and found that 130 institutions had inadequate matters.
‎2026/10/14
Threat actors used AI to target financial institutions, resulting in 16 confirmed breaches and the leakage of over 100,000 cases of personal information.
organisation DB Savings Bank
In addition to the previously known incidents, five more cases involving DB Savings Bank and San Capital have been revealed.
organisation Hyundai Capital
By sector, the affected institutions are: four banks (Shinhan, KB, Busan, and Hana), four savings banks (Yegalam, Welcome, DB, and OK), two non-bank financial companies (Hyundai Capital and San Capital), two online investment-linked financial companies (PFCT and Mouda), one electronic financial company (Brightpick), two virtual asset businesses (Streamy and Prabang), and one mutual bank (Saemaul…
organisation PFCT
By sector, the affected institutions are: four banks (Shinhan, KB, Busan, and Hana), four savings banks (Yegalam, Welcome, DB, and OK), two non-bank financial companies (Hyundai Capital and San Capital), two online investment-linked financial companies (PFCT and Mouda), one electronic financial company (Brightpick), two virtual asset businesses (Streamy and Prabang), and one mutual bank (Saemaul…
organisation Brightpick
By sector, the affected institutions are: four banks (Shinhan, KB, Busan, and Hana), four savings banks (Yegalam, Welcome, DB, and OK), two non-bank financial companies (Hyundai Capital and San Capital), two online investment-linked financial companies (PFCT and Mouda), one electronic financial company (Brightpick), two virtual asset businesses (Streamy and Prabang), and one mutual bank (Saemaul…
organisation Streamy and Prabang
By sector, the affected institutions are: four banks (Shinhan, KB, Busan, and Hana), four savings banks (Yegalam, Welcome, DB, and OK), two non-bank financial companies (Hyundai Capital and San Capital), two online investment-linked financial companies (PFCT and Mouda), one electronic financial company (Brightpick), two virtual asset businesses (Streamy and Prabang), and one mutual bank (Saemaul…
organisation Saemaul Mutual Savings Bank
By sector, the affected institutions are: four banks (Shinhan, KB, Busan, and Hana), four savings banks (Yegalam, Welcome, DB, and OK), two non-bank financial companies (Hyundai Capital and San Capital), two online investment-linked financial companies (PFCT and Mouda), one electronic financial company (Brightpick), two virtual asset businesses (Streamy and Prabang), and one mutual bank (Saemaul…
organisation IP
Financial authorities have stated that "currently, financial institutions are verifying the occurrence of cyber attacks based on shared internet addresses (IP addresses), so the number of affected financial institutions can be expanded."
organisation the Financial Supervisory Commission's
The chairman of the Financial Supervisory Commission's office, Shin Jung-chang, said, "Although I have ordered repeated inspections and strengthening of management, cases where basic parts are not observed have been found, which is very painful."
Intelligence Sources
Chosun Economy 2026-10-14