AI-Driven Cyberattacks Hit 16 Korean Financial Firms, Exposing 100,000 Records

South Korean financial regulators said suspected artificial intelligence agent-driven cyberattacks have affected 16 financial companies and exposed about 100,000 records containing personal information, widening concern over cybersecurity weaknesses across the sector.

The number of affected companies has more than doubled from the seven initially reported. The exposed information includes names, contact details and resident registration numbers. Regulators said they had found no evidence so far that account or card numbers were compromised, but warned that the total number of exposed records could increase as companies continue examining their systems.

The Financial Services Commission disclosed the findings during an emergency response meeting. The incidents, reported since the beginning of October, span several parts of the financial industry, including banks, savings banks, credit finance businesses, electronic payment providers and cryptocurrency companies.

The affected banks are Shinhan, KB Kookmin, BNK Busan and Hana. Yegaram, Welcome, DB and OK are the four savings banks named, while Hyundai Capital and KDB Capital are among the credit finance companies. Other affected organizations include online investment firms PFCT and Mouda, electronic financial services provider Brightfix, cryptocurrency businesses Streami and Pravang, and the Korean Federation of Community Credit Cooperatives.

Authorities are investigating whether the attacks were conducted by the same hacking group. The suspected use of AI agents has also raised the stakes for financial institutions, as automated tools can potentially increase the speed and scale of attacks while placing greater pressure on existing monitoring and response systems.

A broader regulatory inspection found security deficiencies at 130 of 555 financial companies reviewed across 12 areas through Oct. 8, equivalent to 23.4 percent. Problems included delayed security updates, weak oversight of systems no longer supported by their manufacturers, inadequate round-the-clock monitoring, and gaps in authentication and authorization for systems connected to outside networks.

The shortcomings were relatively common among electronic financial services companies and online investment-linked finance providers. Shin Jin-chang, secretary general of the Financial Services Commission, said the results were particularly troubling after repeated regulatory warnings following earlier incidents.

The commission plans to review cybersecurity practices throughout the industry and pursue broader reforms. Those measures are expected to include stronger accountability for chief executives and corporate boards, signaling that regulators intend to treat cyber risk as a senior management responsibility rather than solely a technical issue.