Skip to content
South Korean Banks Targeted in AI-Driven Data Breaches

South Korean Banks Targeted in AI-Driven Data Breaches

First seen 13 Oct 2026, 01:30 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 13, 2026 at 02:30 UTC
  • •Seven South Korean banks were breached, exposing data from 65,000 customers.
  • •The attacks utilized AI tools, including ARTEX and DeepSeek, targeting unpatched vulnerabilities.
  • •Police issued warnings to the public to prevent secondary phishing attacks related to the breaches.

In late September 2026, hackers employed AI tools to breach seven South Korean financial firms, compromising data from 40,000 Yegaram Savings Bank customers and 25,000 Shinhan Bank customers. The Financial Security Institute had previously warned these firms about similar AI attacks at a seminar on September 17. The attackers used ARTEX, an open-source penetration-testing tool, and exploited vulnerabilities in services the banks operated, including loan inquiry pages and mobile apps. Police have issued mass text warnings to the public to be cautious of phishing attempts related to the breaches. The attacks have raised concerns about the security measures in place at these institutions and the potential for further exploitation. CrowdStrike assessed that the attackers are likely motivated by financial gain and are Chinese speakers, but have not linked them to any known hacking group.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-17
FSI seminar on AI attacks
The Financial Security Institute briefed security staff from various banks on potential AI hacking methods.
M.Ajupress
2026-09-30
Data breaches confirmed
Data breaches at seven financial firms were confirmed, affecting tens of thousands of customers.
M.Ajupress
2026-10-12
Police issue mass text warnings
Authorities warned the public about potential phishing scams following the data breaches.
Biz.Chosun

More articles in this cluster (2)

Following this threat?

Track BNK Busan Bank in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (16)

1 / 3

Common questions

Which banks were affected?
The affected banks include Yegaram Savings Bank, Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Welcome Savings Bank, and Hyundai Capital.
What should customers do now?
Customers should remain vigilant for phishing attempts and verify any communications claiming to be from their banks.
How did the attackers breach the banks?
The attackers exploited vulnerabilities in bank-operated services using AI tools, including ARTEX and DeepSeek.