AI-driven cyberattacks breach South Korean banks, exposing regulatory gaps

A wave of AI-assisted cyberattacks hit seven South Korean banks, with Shinhan Bank detecting a breach that exposed personal data of roughly 25,000 customers. The Financial Security Institute identified an AI agent, likely derived from the Chinese Artex AI tool, as the weapon used to infiltrate six additional institutions. Unlike conventional AI chatbots, these agents can autonomously discover vulnerabilities, plan attacks, and learn from outcomes, raising the risk of large-scale damage.

The Ministry of Science and ICT, together with the Korea Internet & Security Agency, activated an emergency response system, and the Financial Services Commission, Financial Supervisory Service, and FSI formed a task force to investigate and monitor further threats. Prior warnings from Google about AI-driven cybercrime had been largely ignored, underscoring Korea’s focus on AI leadership over security safeguards. Analysts argue that the incidents should spur the country to adopt robust guardrails and reconsider its rapid AI advancement strategy.