South Korea probes bank breaches amid suspected AI-powered attacks

A series of cyberattacks have targeted South Korean financial institutions, notably Shinhan Bank and Kookmin Bank, leading to data breaches affecting tens of thousands of customers. The attacks are suspected to involve AI-based automation tools, such as ARTEX AI, which facilitates automated penetration testing and vulnerability exploitation. While the exact perpetrators and attack methods remain unconfirmed, authorities have initiated on-site investigations and coordinated responses involving multiple agencies. The breaches have prompted emergency regulatory actions and calls for enhanced security inspections and information sharing among financial entities.

The breaches exposed personal data of approximately 25,000 Shinhan Bank customers and credit card information of 119,000 Kookmin Bank clients. Hana Bank also suffered a limited breach affecting its sales-support system. The incidents undermine customer privacy and may lead to financial fraud or identity theft. The scale of the affected institutions, each managing assets over $400 billion, highlights the potential systemic risk and consumer trust erosion in South Korea's financial sector.

Financial institutions have been instructed to thoroughly inspect all externally accessible IT systems and services, including non-customer-facing ones, to identify and remediate vulnerabilities. They must reduce unnecessary information exposure and verify authentication and access controls. Rapid sharing of threat intelligence and coordinated incident response are mandated. Authorities are conducting investigations and will oversee consumer protection and compensation efforts. No official vendor patches or fixes apply, as this is an ongoing breach investigation rather than a software vulnerability.