South Korea’s government has responded to recent data breaches affecting seven major financial institutions and other organizations like two large churches and KEPCO. These breaches exposed private information of thousands of customers, including names, phone numbers, income figures, and loan details. Prime Minister Han Seong-sook warned that artificial intelligence might have been involved in the attacks, potentially allowing for more sophisticated phishing attempts. The Financial Supervisory Service identified IP addresses from various countries linked to the breaches, though early reports suggest a possible connection to China through an open-source AI tool named ARTEX.
Written locally by qwen2.5:14b on 2026-10-08,
using this article's own text rather than the other coverage of the
same event (that is the story summary below).
The South Korean government has demanded a comprehensive overhaul of safeguards against hackers after seven of the nation's major financial institutions' cyber defenses were breached last week and the private data of thousands of customers was leaked.
asserted
data → demand → customers
The data breaches go beyond the financial sector, with two of the largest churches in the country and Korea Electric Power Corp. on Wednesday confirming that their online systems had been illegally accessed, although it is not clear whether the same perpetrator was responsible for all the attacks.
asserted
perpetrator → go → attacks
On Tuesday, Prime Minister Han Seong-sook called for measures to be taken swiftly to halt any further leaks.
asserted
measures → call → leaks
"This is a serious situation because this incident is believed to have taken advantage of artificial intelligence, and if AI is used in phishing attacks, it could lead to secondary damage," Yonhap News quoted Han as saying at a Cabinet meeting.
uncertain
News → believe → meeting
"It is also a serious situation in that similar hacking methods could spread beyond the financial sector to industries, as well as government and public sectors."
uncertain
methods → spread → industries
Threats to other sectors
Han said government agencies, public institutions, the financial sector and private enterprises all need to "remain vigilant."
asserted
agencies → say → sectors
Early reports from the US-based cybersecurity firm CrowdStrike suggest that the attack may have originated in China, although South Korea's Financial Supervisory Service (FSS) said it had identified 28 internet protocol addresses in the United States, Japan, Germany and at least 10 other countries that were involved in the bank breaches.
uncertain
that → base → breaches
"South Korea officials are being careful about how they are framing their findings," said Aditya Das, an analyst at cryptocurrency research firm Brave New Coin in Auckland, New Zealand.
asserted
Das → frame → Auckland
In the bank logs, investigators found traces of a tool called ARTEX, an open-source "autonomous penetration-testing" agent built by a Chinese developer, he said.
asserted
he → find → developer
"It is freely available on the internet and officials have said explicitly that a Chinese-built tool doesn't mean Chinese attackers," Das told DW, adding that the use of multiple IP addresses is likely to be "a ploy by the hackers to hide their tracks."
It appears that the hackers exploited weak authentication protocols in portals used by external loan recruiters, employees' mobile tools and sales-support systems.
asserted
hackers → say → recruiters
Data on thousands of customers lost
asserted
Data → lose → customers
According to South Korean media reports, data belonging to as many as 68,000 customers was taken, with Shinhan Bank, KB Kookmin Bank and Hana Bank among the worst affected.
uncertain
data → accord → affected
Names, phone numbers, annual income figures, loan limits and their loan products were accessed, along with a small number of national identification numbers.
asserted
Names → access → numbers
Das pointed out that if a scammer has a person's name, phone number, income figure and is aware that the individual has recently applied for a loan, a fake "bank security" call can be very convincing to the unwary.
asserted
call → point → unwary
Once a victim has transferred funds to an account specified by the scammer, it is very difficult to get it back.
asserted
it → transfer → it
Hyobin Lee, a professor at Sogang University in Seoul, says the seriousness of the incident goes far beyond the simple exposure of personal information.
asserted
seriousness → say → information
"If criminals obtain such information, they may be able to carry out sophisticated financial fraud, identity theft, or highly targeted phishing attacks," she said.
uncertain
she → obtain → fraud
"Another concern is that stolen personal information can be reused or combined with other leaked databases, potentially creating security risks that persist long after the original attack," Lee underlined.
asserted
Lee → steal → attack
"More broadly, such incidents can undermine public confidence in financial institutions and raise concerns about the security of the financial system as a whole.
asserted
incidents → undermine → whole
"
While major financial institutions have invested heavily in protecting their core systems, such as internet banking and mobile banking platforms, Lee said they have overlooked other elements of their networks.
asserted
they → invest → networks
"Some auxiliary systems, such as loan agent information portals and internal mobile applications used by employees, appear to have received less security attention," she said, adding that the application of AI by the hackers is another concerning element.
asserted
application → use → hackers
AI makes hacking easier?
asserted
hacking → make → ?
"In the past, identifying security vulnerabilities, developing malicious code and conducting attacks against financial institutions required substantial technical expertise and considerable time," Lee pointed out.
asserted
Lee → identify → expertise
"Today, generative AI tools can assist with writing computer code, analyzing software vulnerabilities, processing large amounts of information and automating certain stages of cyber operations."
asserted
tools → assist → operations
AI is "lowering the technical barriers to cybercrime" and making it accessible to more bad actors.
asserted
it → lower → actors
At the same time, the technology is ramping up the speed and scale of attacks to overwhelm cyber defenses.
asserted
technology → ramp → defenses
Given those developments, Lee fears that AI-assisted cyberattacks are only going to become more frequent.
asserted
cyberattacks → give → developments
"And the risks will not be limited to financial institutions," she said.
asserted
she → limit → institutions
"Hospitals, government agencies, energy infrastructure, telecommunications networks and other organizations holding sensitive information may also become increasingly attractive targets.
uncertain
Hospitals → hold → information
The Aporia
