Shinhan Bank (Victim): news timeline & CVEs

Chinese Hacker Deployed AI in Campaign Against South Korean Banks

A suspected Chinese attacker used ARTEX and Claude to breach South Korean banks and steal customer data.

CrowdStrike says a financially motivated, likely Chinese-speaking attacker used the open-source agentic tool ARTEX and Anthropic's Claude from late September to early October 2026 to find vulnerabilities and compromise South Korean financial firms. Attacker infrastructure used DeepSeek v4.1-flash as ARTEX's main model, plus GLM-5.3 and Grok 4.6, and Claude was asked to find Korean Telegram groups for selling stolen data. Shinhan Bank and Yegaram Savings Bank reported breaches affecting about 25,000 and 40,000 people. South Korea's Financial Services Commission warned customers on October 6 about phishing and loan scams.

Infosecurity Magazineupdated 14:12 UTC · 7h agofirst 11:00 UTC · 10h agoThreat actor in the wild 4 sources1

Financially Motivated Hacker Uses Agentic AI to Breach Multiple South Korean Finance Targets

CrowdStrike says a financially motivated operator used agentic AI to breach South Korean banks and steal data.

CrowdStrike reported a financially motivated campaign, active from late September to early October 2026, that used the ARTEX penetration-testing platform and commercial large language models against South Korean financial organizations. Exposed infrastructure showed ARTEX backed by DeepSeek V4.1 Flash, with separate Claude Code sessions using Zhipu AI’s GLM-5.3 and Grok 4.6. Shinhan Bank reported roughly 25,000 customers’ personal information compromised, and KB Kookmin Bank reported 119 affected customers; a broader figure of nine banks is not confirmed for this operator. CrowdStrike has moderate confidence the unidentified operator is Chinese-speaking, and self-reported alias YY remains unverified.

GBHackersupdated 14:12 UTC · 7h agofirst 10:16 UTC · 11h agoThreat actor in the wild 4 sources

AI-powered hacking tools enabled a likely single attacker to breach multiple South Korean banks

A suspected lone attacker used AI pentest tool ARTEX to breach South Korean banks, stealing over 25,000 Shinhan records.

CrowdStrike reports that a suspected Chinese-speaking attacker compromised multiple South Korean financial institutions between late September and early October 2026 and stole large volumes of data. At Shinhan Bank alone, more than 25,000 records containing names, contact details, income, and credit limits were taken, according to newspaper Khan. The attacker used ARTEX, a Chinese open-source tool published on GitHub in July that automates penetration testing with DeepSeek v4.1-flash, GLM-5.3, and Grok 4.6. Researchers also found Claude Code session logs showing searches for Telegram groups to sell stolen data, and South Korea's financial regulator and President Lee Jae Myung called for an investigation.

The Decoder09:24 UTC · 12h agoData breach in the wild 6 sources1

South Korean officials believe AI agents were used to hack several banks

South Korea probes AI-agent hacks of at least seven banks that exposed data on 68,000 people.

South Korean President Lee Jae Myung said officials are investigating hacks of at least seven financial institutions that exposed personal data of at least 68,000 people. Authorities believe AI agents, and specifically the Chinese tool Artex AI, were used against the banks. Named victims include Hana Bank, KB Kookmin Bank, and Shinhan Bank, which reportedly said about 25,000 customers were affected. The Financial Supervisory Service identified 33 IP addresses linked to at least 12 countries, and a 28-investigator team was formed.

The Recordupdated 09:24 UTC · 12h agofirst Oct 6, 15:29 UTC · 2d agoData breach in the wild 6 sources3

South Korea probes bank breaches amid suspected AI-powered attacks

South Korea is investigating confirmed data breaches at Shinhan, Kookmin, and Hana banks amid suspected AI-assisted attacks.

South Korea's Financial Services Commission held an emergency meeting after cyber incidents at major banks and confirmed a data breach at Shinhan Bank. Local reports say Shinhan exposed details of about 25,000 customers and KB Kookmin Bank leaked credit-card information for 119,000 clients, while Hana Bank suffered a limited compromise of a sales-support system. Authorities ordered inspections of externally accessible systems, tighter access controls, and rapid sharing of threat information with KISA. Yonhap reported that a server used in the attacks referenced ARTEX AI, an open-source agentic penetration-testing system, but banks and regulators have not confirmed that tool was used.

BleepingComputerupdated 09:24 UTC · 12h agofirst Oct 5, 14:22 UTC · 3d agoData breach in the wild 6 sources

South Korea’s President Lee Jae Myung orders thorough probe into data breaches at local banks

South Korea's president ordered a probe after breaches at Shinhan, KB Kookmin, Hana, and Busan banks.

President Lee Jae Myung ordered a thorough investigation into recent data breaches at South Korean financial and public institutions, citing growing AI-powered cyberattacks. Shinhan Bank reported a breach affecting about 25,000 customers on Thursday. KB Kookmin Bank, Hana Bank, and BNK Busan Bank reported similar incidents the following day. Spokesperson Kang Yu-jung said officials must investigate and develop countermeasures.

DataBreaches.netupdated 09:24 UTC · 12h agofirst Oct 4, 19:38 UTC · 4d agoData breach 6 sources1

South Korean President Orders Full Security Checks After Financial Sector Hacks

South Korea's president ordered security checks after banks leaked tens of thousands of customers' personal records.

South Korean President Lee Jae Myung ordered a full investigation and sector-wide security checks after a series of confirmed data breaches at banks and other financial firms. Shinhan Bank said about 25,000 customers were affected, including names, phone numbers, income, loan limits, and some resident registration numbers. KB Kookmin Bank and Hana Bank reported leaks of 119 and 89 customer records through employee or operations support systems, separate from internet and mobile banking. Yegaram Savings Bank reported about 40,000 customers affected, Hyundai Capital exposed data on 146 housing-loan agents, and BNK Busan Bank reported 11 outsourced workers. Police and financial authorities are investigating; reports of an AI automation tool and shared IP addresses remain unconfirmed as a single campaign.

Cyber Security Newsupdated 09:24 UTC · 12h agofirst Oct 4, 11:11 UTC · 4d agoData breach in the wild 6 sources

Shinhan Bank

Timeline7 articles

Appears with