AI-Powered Cyberattacks Target Financial and Retail Sectors

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Hackers have increasingly used AI tools, such as ARTEX and Claude Code, to automate and accelerate cyberattacks on financial institutions and retail businesses, leading to data breaches, ransomware incidents, and operational disruptions. These AI-driven attacks have lowered the technical barrier for cybercrime and increased risks for businesses and consumers, especially in South Korea.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves AI systems explicitly used by attackers to accelerate cyber intrusions and data theft, which have already caused harm to retail businesses and consumers through ransomware, data breaches, and fraud. The AI's role is pivotal in enabling these attacks to be faster and more effective, directly contributing to the harms described. Hence, this qualifies as an AI Incident rather than a hazard or complementary information, as the harms are occurring and AI is a direct factor.[AI generated]
AI principles
Robustness & digital securityPrivacy & data governance

Industries
Financial and insurance servicesLogistics, wholesale, and retail

Affected stakeholders
BusinessConsumers

Harm types
Economic/PropertyHuman or fundamental rights

AI system task:
Content generation


Articles about this incident or hazard