Shinhan Bank (Organization): news timeline & CVEs

Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data

Suspected lone Chinese-speaking hacker used ARTEX AI pentest tool to breach Shinhan, Kookmin, Hana and other South Korean financial firms, stealing customer data.

A suspected lone operator used ARTEX, an open-source China-developed agentic penetration-testing tool, to breach multiple South Korean financial organizations between late September and early October 2026. Victims include Shinhan Bank, Kookmin Bank, Hana Bank, BNK Busan Bank, Hyundai Capital, and several savings banks and online lenders, though core banking platforms were not compromised. CrowdStrike found exposed Claude Code session records and ARTEX configs on actor infrastructure, showing use of DeepSeek v4.1-flash, GLM-5.3, and Grok 4.6 as AI backends. CrowdStrike assessed with moderate confidence the actor was Chinese-speaking and financially motivated, and not linked to a known threat group.

Cyber Security Newsupdated 14:12 UTC · 7h agofirst 11:14 UTC · 10h agoData breach in the wild 4 sources1

AI-powered hacking tools enabled a likely single attacker to breach multiple South Korean banks

A suspected lone attacker used AI pentest tool ARTEX to breach South Korean banks, stealing over 25,000 Shinhan records.

CrowdStrike reports that a suspected Chinese-speaking attacker compromised multiple South Korean financial institutions between late September and early October 2026 and stole large volumes of data. At Shinhan Bank alone, more than 25,000 records containing names, contact details, income, and credit limits were taken, according to newspaper Khan. The attacker used ARTEX, a Chinese open-source tool published on GitHub in July that automates penetration testing with DeepSeek v4.1-flash, GLM-5.3, and Grok 4.6. Researchers also found Claude Code session logs showing searches for Telegram groups to sell stolen data, and South Korea's financial regulator and President Lee Jae Myung called for an investigation.

The Decoder09:24 UTC · 12h agoData breach in the wild 6 sources1

South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks

South Korea's president ordered an investigation into breaches at major banks exposing ~65,000 customers' data; infrastructure tied to AI pen-testing framework ARTEX AI.

President Lee Jae Myung ordered a comprehensive investigation after Shinhan Bank disclosed a breach affecting about 25,000 customers, with KB Kookmin, Hana Bank, BNK Busan Bank, Yegaram Savings Bank (~40,000 customers) and Hyundai Capital (146 loan agents) also reporting exposures. Leaked data included names, phone numbers, annual income, loan limits and some resident registration numbers, though no payment credentials or unauthorized transactions were found. Investigators found a Chinese-language string reading 'AI autonomous penetration testing console' on infrastructure linked to the Shinhan intrusion, associated with the open-source ARTEX AI framework, but actual use of the tool is unproven; reports tie the incident to credential stuffing. The Financial Services Commission held an emergency sector-wide meeting and regulators are pushing AI-driven detection, credential-stuffing monitoring, and phishing-resistant MFA.

GBHackersupdated 09:24 UTC · 12h agofirst Oct 5, 04:58 UTC · 3d agoData breach 6 sources

South Korean President Orders Full Security Checks After Financial Sector Hacks

South Korea's president ordered security checks after banks leaked tens of thousands of customers' personal records.

South Korean President Lee Jae Myung ordered a full investigation and sector-wide security checks after a series of confirmed data breaches at banks and other financial firms. Shinhan Bank said about 25,000 customers were affected, including names, phone numbers, income, loan limits, and some resident registration numbers. KB Kookmin Bank and Hana Bank reported leaks of 119 and 89 customer records through employee or operations support systems, separate from internet and mobile banking. Yegaram Savings Bank reported about 40,000 customers affected, Hyundai Capital exposed data on 146 housing-loan agents, and BNK Busan Bank reported 11 outsourced workers. Police and financial authorities are investigating; reports of an AI automation tool and shared IP addresses remain unconfirmed as a single campaign.

Cyber Security Newsupdated 09:24 UTC · 12h agofirst Oct 4, 11:11 UTC · 4d agoData breach in the wild 6 sources

Shinhan Bank

Timeline4 articles

Appears with

Solo Hacker Used AI Tools to Breach South Korean Financial Organizations and Steal Data

AI-powered hacking tools enabled a likely single attacker to breach multiple South Korean banks

South Korea Orders Investigation Into AI-Powered Cyberattacks on Major Banks

South Korean President Orders Full Security Checks After Financial Sector Hacks