South Korean authorities opened emergency investigations after cyber incidents at major banks including Shinhan Bank, KB Kookmin Bank, and Hana Bank, with reported customer and credit-card data exposed. Officials confirmed a breach at Shinhan Bank and said other banks were affected, while local reports said Shinhan exposed data on 25,000 customers and Kookmin leaked credit-card information on 119,000 clients. Yonhap reported a server artifact pointing to ARTEX AI, an open-source agentic penetration-testing framework, but authorities have not confirmed the tool or attributed the attacks.
Why it matters: This affects bank customers directly and suggests attackers may be using AI tools to speed up reconnaissance and intrusion work against financial institutions. Banks should urgently review internet-exposed systems and access controls, while affected customers should watch for fraud and account abuse.
Bill Toulas
2026.10.10
97% relevant
This directly updates the same bank breach event by naming the attacker’s use of ARTEX AI and Claude agents, adding CrowdStrike attribution details, describing exposed attacker infrastructure and session files, and clarifying that the incidents caused outages and exposed personal and credit-card data.
2026.10.06
98% relevant
This is a direct update on the same bank-hacking incident, adding President Lee Jae Myung’s public attribution that AI agents were likely used, the reported use of the Artex AI tool, the scope of at least seven affected institutions and 68,000 exposed people, and the creation of a 28-person investigation team tracing 33 IP addresses across 12 countries.
Bill Toulas
2026.10.05
100% relevant
This article appears to be the first clear report in the set tying together the emergency South Korean government response, named bank victims, reported customer-data exposure, and the suspicion that AI-assisted attack tooling may have been used.
← Back to all stories