South Korea orders probe after cyberattacks hit major banks

South Korean President Lee Jae Myung has ordered a thorough investigation into a series of cyberattacks that exposed customers’ personal information at several financial institutions, amid indications that artificial intelligence (AI) may have been used in some of the attacks.

South Korean President Lee Jae Myung has ordered a thorough investigation into a series of cyberattacks that exposed customers’ personal information at several financial institutions, amid indications that artificial intelligence (AI) may have been used in some of the attacks.

Lee gave the order at a Cabinet meeting on Tuesday, saying signs of AI use in some hacking incidents had caused public concern and calling for authorities to determine the circumstances quickly and minimise the damage.

“In some hacking cases, details have emerged of the possible use of artificial intelligence (AI), causing considerable public concern and anxiety,” Lee said. “Please carry out a swift and clear determination of the circumstances and concentrate personnel and resources on minimizing damage.”

Police have launched a full-scale investigation into the attacks, Yonhap news agency reported, with a 28-member team examining possible violations of South Korea’s information and communications network law.

Several financial firms, including Shinhan Bank, KB Kookmin Bank and Hana Bank, have reported data breaches or hacking attempts. Woori Bank and NH Nonghyup Bank were also targeted, although the latter banks said they had blocked unauthorized access and no customer information was leaked.

Shinhan Bank said about 25,000 customers had their personal information, including names, phone numbers and annual income, exposed. Hana Bank reported that personal information belonging to 89 customers had been leaked.

The Financial Services Commission (FSC) said it had ordered financial institutions to conduct comprehensive security inspections, tighten access controls and strengthen measures to prevent further attacks.

On Sunday, FSC Chairman Lee Eog-weon held an emergency meeting with financial industry associations, regulators and executives from affected institutions, warning that the sector must respond with the highest level of vigilance.

Authorities have not disclosed the specific AI tools allegedly used in the attacks or the full extent of the breaches. The Financial Supervisory Service has identified 19 internet protocol (IP) addresses in 12 countries that investigators believe were used in the attacks, according to industry sources cited by Yonhap.

Lee has also called for South Korea to strengthen its cybersecurity capabilities as AI-driven hacking methods become more sophisticated.

The incidents come amid growing concern over the use of AI in cyberattacks worldwide. An AI research firm said last week that AI agents had attempted to hack a Canadian government website, although Canadian authorities said there was no indication that its systems had been compromised.