South Korean President Orders Thorough Probe Into Major Bank and Public Agency Data Leaks

South Korean President Lee Jae Myung ordered a sweeping investigation into major data breaches hitting banks and public agencies, with more than 60,000 individuals affected. Firstpost reported that attacks struck Shinhan Bank, KB Kookmin Bank, Hana Bank, and other financial institutions starting September 30, 2026. Regulators now suspect attackers used artificial intelligence tools to break through security defenses.
The Financial Services Commission warned that the entire financial sector must stay on high alert. Seoul Economic Daily noted that attackers routed traffic through IP addresses in the US, Japan, Singapore, Vietnam, and Britain. Regulators have ordered all banks to conduct urgent security inspections and tighten access controls immediately.
Hackers bypassed main banking networks by going after smaller, external-facing platforms. The Elec reported they focused on loan-agent portals and mobile business tools that lacked strict monitoring. These peripheral systems gave attackers an easier entry path than hitting core banking networks directly.
Shinhan Bank lost roughly 25,000 customer records including names and income data. SBS News reported Yegaram Savings Bank suffered the largest breach with 40,000 records compromised. Smaller institutions like KB Kookmin Bank, Hana Bank, and Hyundai Capital also reported breaches but with fewer affected customers.
Security researchers found traces of ARTEX AI on attacker servers. Yonhap News reported this open-source tool automates penetration testing and credential stuffing attacks. Cybersecurity expert Mun Chong-hyun said AI offensive tools are a "double-edged sword" that make hacking far easier for criminals without technical expertise.
FSC Chairman Lee Eog-weon said "the possibility of AI-powered attacks cannot be ruled out." He proposed fighting AI attacks with AI-driven defenses. Yonhap News reported regulators now require banks to implement advanced security systems that catch threats in real time.
The Financial Services Commission ordered all banks to restrict who can access external systems. Business Standard reported that financial institutions must tighten access controls and minimize outside system connections. Regulators also mandated multi-factor authentication and advanced CAPTCHA on all customer-facing platforms.
President Lee instructed officials to maintain "grave awareness" and conduct a full investigation. The Hans India reported that both the FSC and Financial Supervisory Service are pushing banks toward permanent high-alert status. Security experts say the breach exposed major structural weaknesses in how banks manage third-party vendor access.
South Korea's main opposition People Power Party urged authorities to investigate possible North Korean state involvement. Ground News reported the party pointed to historical precedent of Pyongyang launching cyberattacks on Korean financial systems. The timing and scale of the breach raised questions about whether a foreign government was behind the attacks.
Publishers
30
Articles
72
Reach
102