AI-driven cyberattacks hit 16 financial firms, expose 100,000 records

The Financial Services Commission said suspected AI agent-driven cyberattacks had affected 16 financial firms in Korea since the beginning of this month, exposing about 100,000 personal records. The affected firms include banks, savings banks, credit finance companies, electronic payment providers and cryptocurrency businesses. Regulators found security deficiencies at 130 of 555 firms reviewed through Oct. 8 and plan broader sector reforms, including greater accountability for CEOs and boards.

The exposed information included names, contact details and resident registration numbers, while regulators found no evidence that account or card numbers had been compromised.

The affected institutions included Shinhan, KB Kookmin, BNK Busan and Hana banks, as well as Yegaram, Welcome, DB and OK savings banks.

Common deficiencies included missing security patches, inadequate oversight of unsupported systems, a lack of 24-hour monitoring, and weaknesses in external-system authentication and authorization.

The Financial Services Commission is investigating whether the attacks were conducted by the same hacking group.

Published Oct 14, 2026 4:27 pm KST

Updated Oct 14, 2026 4:44 pm KST

A pedestrian passes a Seoul branch of the Korean Federation of Community Credit Cooperatives, Wednesday, one of the firms affected by the recent artificial intelligence-powered cyberattacks. Yonhap

The number of financial firms affected by suspected artificial intelligence (AI) agent-driven cyberattacks has risen to 16, more than double the seven initially reported, financial regulators said Wednesday.

About 100,000 records containing personal information, including resident registration numbers, were exposed. The tally could rise as companies continue checking their systems for signs of intrusion.

Regulators also found security deficiencies at 130 of the 555 financial firms reviewed, including failures to apply the latest security patches.

The Financial Services Commission (FSC) disclosed the findings at an emergency response meeting. It said the breaches, reported since the beginning of this month, have affected banks, savings banks, credit finance companies, electronic payment providers and cryptocurrency businesses.

The affected firms include four banks — Shinhan, KB Kookmin, BNK Busan and Hana — and four savings banks — Yegaram, Welcome, DB and OK. Hyundai Capital and KDB Capital are among the affected credit finance companies.

Others on the list include online investment firms PFCT and Mouda; electronic financial services provider Brightfix; cryptocurrency businesses Streami and Pravang; and the Korean Federation of Community Credit Cooperatives.

The leaked information includes names, contact details and resident registration numbers. Regulators have found no evidence so far that account or card numbers were compromised.

They are also investigating whether the attacks were carried out by the same hacking group.

The breaches have drawn attention to wider gaps in financial firms’ cybersecurity. Of 555 financial companies inspected across 12 areas through Oct. 8, 130, or 23.4 percent, were found to have deficiencies.

Common problems included missing security updates, inadequate oversight of systems no longer supported by manufacturers, a lack of 24-hour security monitoring and gaps in authentication and authorization for external systems. Such deficiencies were relatively widespread among electronic financial services providers and online investment-linked finance companies.

FSC Secretary General Shin Jin-chang, who chaired the meeting, said the findings were particularly troubling given repeated regulatory warnings following earlier incidents, including the massive 2025 Lotte Card data breach.

“It is deeply troubling that financial firms are still failing to meet basic security requirements despite repeated calls for comprehensive inspections and stronger controls,” he said.

The FSC plans to review security practices across the sector and pursue broader reforms, including measures to hold CEOs and boards more accountable.

Bank data breach victims step up calls for compensation

Lee orders thorough probe into data breaches at local banks

[EXPLAINER] How AI emerged as new threat in Korea's bank hacking crisis

韩国金融服务委员会表示，自本月初以来，疑似人工智能代理驱动的网络攻击已影响韩国16家金融公司，导致约10万条个人记录泄露。受影响的公司包括银行、储蓄银行、信贷公司、电子支付服务商和加密货币公司。监管机构在10月8日前审查的555家公司中，发现130家存在安全漏洞，并计划进行更广泛的行业改革，包括加强对首席执行官和董事会的问责。

泄露的信息包括姓名、联系方式和居民登记号码，但监管机构没有发现任何证据表明账户或卡号已被泄露。

受影响的机构包括新韩银行、KB国民银行、BNK釜山银行和韩亚银行，以及Yegaram储蓄银行、Welcome储蓄银行、DB储蓄银行和OK储蓄银行。

常见缺陷包括缺少安全补丁、对不受支持的系统监管不足、缺乏 24 小时监控以及外部系统身份验证和授权方面的弱点。

金融服务委员会正在调查这些攻击是否由同一黑客组织实施。

发布于2026年10月14日下午4:27（韩国标准时间）

更新于2026年10月14日下午4:44（韩国标准时间）

周三，一名行人经过韩国社区信用合作社联合会首尔分部，该机构是近期人工智能网络攻击的受害者之一。（韩联社）

金融监管机构周三表示，受疑似人工智能（AI）代理驱动的网络攻击影响的金融公司数量已上升至 16 家，是最初报告的 7 家的两倍多。

约有10万条包含个人信息（包括居民登记号码）的记录遭到泄露。随着各公司继续检查系统是否存在入侵迹象，泄露数量可能还会上升。

监管机构还发现，在接受审查的 555 家金融公司中，有 130 家存在安全缺陷，包括未能应用最新的安全补丁。

金融服务委员会（FSC）在一次紧急应对会议上公布了调查结果。该委员会表示，自本月初以来报告的违规行为已影响到银行、储蓄银行、信贷金融公司、电子支付服务商和加密货币企业。

受影响的公司包括四家银行——新韩银行、KB国民银行、釜山BNK银行和韩亚银行——以及四家储蓄银行——艺嘉兰储蓄银行、惠康储蓄银行、DB储蓄银行和OK储蓄银行。现代资本和韩国产业银行资本也位列受影响的信贷金融公司之列。

名单上的其他公司包括在线投资公司 PFCT 和 Mouda；电子金融服务提供商 Brightfix；加密货币公司 Streami 和 Pravang；以及韩国社区信用合作社联合会。

泄露的信息包括姓名、联系方式和居民登记号码。监管机构目前尚未发现任何证据表明账户或银行卡号码已被泄露。

他们还在调查这些攻击是否由同一黑客组织实施。

这些安全漏洞凸显了金融公司网络安全方面存在的更大缺陷。截至10月8日，在12个地区接受检查的555家金融公司中，有130家（占23.4%）被发现存在安全隐患。

常见问题包括缺少安全更新、对厂商不再支持的系统监管不力、缺乏24小时安全监控以及外部系统的身份验证和授权漏洞。此类缺陷在电子金融服务提供商和在线投资金融公司中较为普遍。

主持会议的金融服务委员会秘书长申进昌表示，鉴于此前发生的事件（包括 2025 年乐天信用卡大规模数据泄露事件）后监管机构多次发出警告，此次调查结果尤其令人担忧。

“尽管一再呼吁进行全面检查和加强管控，但金融公司仍然未能满足基本的安全要求，这令人深感不安，”他说。

金融服务委员会计划审查整个行业的安全措施，并推行更广泛的改革，包括采取措施让首席执行官和董事会承担更多责任。

银行数据泄露受害者加大力度呼吁赔偿

李显龙下令彻底调查本地银行的数据泄露事件

【解读】人工智能如何成为韩国银行黑客危机中的新威胁