A series of cyberattacks targeting South Korean financial institutions has exposed sensitive customer information and raised concerns about the growing use of artificial intelligence in cybercrime.
At least nine major South Korean banks have been targeted by cyberattacks or related hacking attempts since late September 2026, according to media reports. Several institutions have confirmed that customer information was exposed, while others have reported suspicious activity without confirming data leaks.
The exposed information reportedly includes customers’ names, phone numbers, annual incomes and personal loan limits.
Thousands of Customers Potentially Affected
Shinhan Bank reported that approximately 25,000 customers were affected by a data exposure involving personal information.
Other financial institutions, including KB Kookmin Bank and Hana Bank, also reported smaller-scale exposures. Authorities have been investigating the incidents and examining whether weaknesses in the banks’ cybersecurity systems contributed to the breaches.
The attacks have drawn particular attention because investigators believe artificial intelligence tools may have played a role in helping the attacker identify vulnerabilities and carry out operations.
Suspected Attacker Allegedly Used AI Tools
According to cybersecurity company CrowdStrike, a suspected individual based in China’s Guangdong Province may have been behind the attacks.
CrowdStrike’s investigation reportedly identified traces of AI-assisted activity involving tools such as Claude Code and Chinese-developed AI systems.
The Washington Post reported on November 1 that investigators believe the suspected attacker used AI chatbots to assist with hacking activities and attempts to sell stolen information.
However, the suspected individual’s identity and personal details have not been independently established. South Korean authorities have also cautioned that technical clues, including IP addresses, do not necessarily establish an attacker’s actual location.
The investigation remains ongoing, and the reported involvement of AI tools should not be interpreted as proof that a particular AI company or chatbot was responsible for the attacks.
Growing Cybersecurity Challenges for Financial Institutions
The incidents highlight a broader challenge facing banks and financial institutions as AI tools become increasingly capable of assisting with technical tasks.
Cybersecurity experts have warned that AI can lower the technical barriers to certain types of cyberattacks, potentially allowing less-experienced individuals to identify software vulnerabilities and automate parts of an attack.
At the same time, financial institutions are exploring ways to use AI to strengthen their own security systems and detect threats more quickly.
South Korean authorities are investigating the incidents and reviewing cybersecurity measures across the financial sector.
The case has become another example of how financial institutions must adapt their security systems as artificial intelligence changes the methods available to both attackers and defenders.
Source: The Washington Post
Additional Sources: Reuters, The Korea Times
Category: Society
Published: November 2, 2026