Skip to content
NewA calmer, faster ZeroHour
StoryData breachhigh

Seoul police detain ex-pentester after theft of 8.2 million records

3 sources · 3 articlesFirst reported Updated ()1
What's new

October 27: Cyber Security News says police announced the case October 26, attacks continued into October 2026, and 360 million won in demands, cited to Yonhap, were not confirmed payments.

Merged summary · x-ai/grok-4.7 · rewritten as coverage arrivesSummaries by Vani AI

A former pentester remains detained after police say his group stole 8.2 million records from about 90 Korean organizations and sought payment from 38.

Seoul police say seven suspects, led by a 32-year-old former penetration tester identified as A, breached about 90 South Korean organizations from September 2025 into October 2026 and stole 8.2 million records from schools, hospitals, universities, companies and golf courses. He was arrested October 15 and referred to prosecutors October 23; he is the only suspect detained. Investigators say he used generative AI, including ARTEX, from late August 2026, with AI linked to about 60 victims. The group sought payment from 38 organizations: BleepingComputer reports about $270,000, while GBHackers and Cyber Security News report 360 million won, the latter citing Yonhap. Police are checking dark-web exposure; GBHackers says the data was recovered. Reporting does not confirm payments.

Key facts
  • The leader worked in penetration testing from 2019 to 2022.
  • Police opened the case after a June victim complaint, BleepingComputer reports.
  • Six other suspects remain under investigation and are not detained.
  • GBHackers says five accomplices who made threats were arrested from July.
  • Authorities call this Korea’s first large-scale generative-AI hacking arrest.
  • Reports give no confirmed vulnerability list or malware details.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

Timeline

dated events in the reporting · oldest first
  1. Oct 15, 2026Police arrest the 32-year-old alleged leader. · BleepingComputer
  2. Oct 23, 2026The leader is referred to prosecutors. · BleepingComputer
  3. Oct 26, 2026Seoul police announce the case. · Cyber Security News

What each outlet adds

beyond the shared facts
  • BleepingComputerNames ARTEX AI, cites about $270,000, and a June complaint.
  • GBHackersSays data was recovered and five accomplices were arrested from July.
  • Cyber Security NewsAdds the October 26 announcement and no confirmed payments.
Products
ARTEXARTEX AI
Organizations
Seoul Metropolitan Police AgencySeoul Metropolitan Police
Countries
South Korea

Coverage

oldest first · one row per article · UTC
  1. · 4d ago BleepingComputerFirst report

    South Korea arrests gang that used ARTEX AI to steal 8.2 million records

    Police say seven suspects hit more than 90 organizations; ransom was demanded in 38 cases, and only the leader remains detained.

  2. · 3d ago GBHackers

    South Korean police arrest suspect in theft of 8.2 million records

    Investigators link AI-assisted intrusions at 60 victims and extortion demands totaling 360 million won.

  3. · 3d ago Cyber Security News

    Police arrest man accused of stealing 8.2 million Korean records

    About 90 organizations were hit from September 2025; extortion demands totaled 360 million won, not confirmed payments.