South Korea investigates bank breaches amid suspected AI-assisted attacks
Summary
South Korean authorities are investigating breaches affecting Shinhan, Kookmin and Hana banks. Reports cite customer data leaks, but authorities have not confirmed a link to AI tools or identified the attackers.
Key points
- South Korea’s Financial Services Commission confirmed a data breach at Shinhan Bank and said other incidents affected banks including Kookmin.
- Local media reported that Shinhan exposed details of 25,000 customers and Kookmin leaked credit card information for 119,000 clients.
- Hana Bank also suffered a limited-scope breach after its sales-support system was compromised.
- Authorities launched on-site investigations and shared actionable information with relevant agencies, including KISA.
- Financial companies were told to inspect externally accessible systems, address exposure and access-control weaknesses, coordinate threat information, and report inspection results.
- A server reportedly had a page title associated with ARTEX AI, but authorities have not confirmed the tool was used or linked the attacks to a specific actor.
Article Details
- Victim Organization
- Shinhan Bank; KB Kookmin Bank; Hana Bank
- Incident Type
- Confirmed data breach at Shinhan Bank; cybersecurity incident and reported credit card data leak at KB Kookmin Bank; limited-scope breach of Hana Bank's sales-support system.
- Disclosure Date
- 2026-10-04
- Data Types Exposed
- Customer details reportedly leaked from Shinhan Bank; specific fields were not disclosed.
- Credit card information reportedly leaked from KB Kookmin Bank.
- Affected Records
- Local media reported details of 25,000 Shinhan Bank customers and credit card information of 119,000 KB Kookmin Bank clients leaked.
- Operational Impact
- Hana Bank's sales-support system was compromised. No service disruption was reported.
- Claim Status
- confirmed