South Korea’s largest banks faced AI-driven cyberattacks, exposing personal data of tens of thousands of customers, as regulators demanded urgent security reviews.
South Korean financial institutions, including KB Kookmin, Shinhan, Hana, Woori, and NH Nonghyup, were targeted by cyberattacks leveraging artificial intelligence, according to reports from Inbusiness and Wtftime. The attacks, attributed to AI agents capable of autonomously identifying vulnerabilities, compromised personal data but not financial transactions, according to the banks.
Scale of the Attacks
The most severe breach occurred at Shinhan Bank, where data for at least 25,000 customers was exposed, according to Inbusiness. KB Kookmin reported 119 affected individuals, including 99 clients and 20 current or former employees, while Hana Bank disclosed leaks involving 89 clients. BNK Financial Group confirmed 11 incidents, though Woori and NH Nonghyup did not report data breaches. The attacks targeted internal systems, including employee mobile platforms and sales support tools, but financial transaction data remained secure.
Sin Jin Chan said, We must be fully prepared to minimize harm to consumers in the event of an incident,
emphasizing the need for immediate security measures.
Regulatory Response
The FSC ordered financial institutions to audit all external IT assets, including AI systems, and share IP addresses and intrusion logs with regulators. Korea Internet & Security Agency (KISA) is investigating the attacks, which coincided with a parliamentary review of financial sector practices. Lawmakers criticized banks for repeated data leaks, with Democratic Party deputy Pak San Hyek stated, Banks holding citizens' assets and credit history cannot afford recurring breaches.
The Wtftime report noted that AI reduced attack planning time, enabling faster reconnaissance and execution. However, no known hacking groups have claimed responsibility. The National Investigation Agency of South Korea is leading the probe, with President Lee Jae-myung directing authorities to minimize potential damage, citing AI’s role in simplifying hacking processes.
Implications for Cybersecurity
The attacks highlight growing risks from autonomous AI systems in cybercrime. Inbusiness cited experts warning that AI agents could bypass traditional defenses by operating without human oversight. The FSC is now prioritizing AI security frameworks, with Sin Jin Chan stating, We must be fully prepared to minimize harm to consumers in the event of an incident.
As the investigation continues, the incident highlights the urgent need for financial institutions to adapt to AI-driven threats. Wtftime reported that South Korea’s president has directed authorities to minimize potential damage, citing AI’s role in simplifying hacking processes. The FSC also mandated that banks evaluate vulnerabilities in AI-driven services and strengthen authentication protocols to prevent unauthorized access.
The attacks occurred ahead of a planned parliamentary review of financial sector practices, prompting lawmakers to demand stricter oversight. Pak San Hyek emphasized that banks must prioritize data protection, noting that repeated breaches violate public trust. The FSC reiterated its commitment to enforcing cybersecurity standards, with Sin Jin Chan adding, We must be fully prepared to minimize harm to consumers in the event of an incident.