South Korea Investigates Bank Breaches, Suspects AI-Powered Attacks

Breaches at Major South Korean Banks

South Korea's Financial Services Commission (FSC) held an emergency meeting following cyberattacks on financial institutions. Shinhan Bank confirmed a data breach, and other incidents affected Kookmin Bank and Hana Bank. Shinhan Bank and KB Kookmin Bank are large commercial banks, each managing over $400 billion in assets.

Customer Data Compromised

Reports indicate that Shinhan Bank leaked details of 25,000 customers, while Kookmin Bank leaked credit card information for 119,000 clients. Hana Bank also experienced a limited-scope breach through its sales-support system. South Korean President Lee ordered a thorough investigation into these personal data leaks.

Suspected AI-Powered Attacks

While official channels have not named perpetrators, local reports suggest a server used in the attacks had an HTML page title linked to ARTEX AI, an open-source penetration-testing system. ARTEX AI automates information gathering, vulnerability discovery, and attack execution. Although its use in the Shinhan breach is unconfirmed, some threat analysts believe AI-based attack automation tools were involved.

Regulatory Response and Directives

Authorities launched on-site investigations and shared information with agencies like KISA. Financial companies are now instructed to inspect all IT systems, reduce information exposure, check authentication controls, and share threat information. They must also submit internal security inspection results promptly. The FSC pledged to oversee consumer protection and analyze incidents for regulatory improvements.