AI-Driven Hacking Attack Leads to Personal Data Leak at Hyundai Capital

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Hyundai Capital in South Korea suffered an AI-assisted hacking attack via overseas IPs, resulting in the leakage of personal information (names, phone numbers, resident registration numbers) of 146 housing loan agents. No general customer data or internal system access was reported. Authorities are investigating and enhancing security measures.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves the use of an AI system in a malicious hacking attack that directly led to the unauthorized access and leakage of personal data, which constitutes a violation of privacy rights and a breach of obligations under applicable law protecting personal data. This fits the definition of an AI Incident because the AI system's use directly caused harm through data breach and privacy violation.[AI generated]
AI principles
Privacy & data governanceRobustness & digital security
Industries
Financial and insurance servicesDigital security
Affected stakeholders
Workers
Harm types
Human or fundamental rights
AI system task:
Other

Articles about this incident or hazard