AI-Driven Hacking Causes Major Data Breaches and Financial Losses in South Korean Financial Sector

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

AI-enabled hacking attacks led to 47,000+ personal data leaks and about 1 billion KRW stolen across 37 South Korean financial institutions. Regulatory responses include security audits, new AI-based defense systems, and relaxed network separation rules to counter ongoing AI threats and prevent further harm.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves AI systems both in the form of AI agents conducting hacking attacks (malicious AI use causing harm) and the planned use of AI systems for defense. The article reports actual incidents of AI-driven hacking causing data breaches and financial losses, which constitute harm to property and communities. Therefore, the AI system's use has directly led to harm, qualifying this as an AI Incident. The regulatory change and planned evaluations are responses to this incident, but the core event is the realized harm from AI-enabled attacks.[AI generated]
AI principles
Privacy & data governanceRobustness & digital security
Industries
Financial and insurance servicesDigital security
Affected stakeholders
ConsumersBusiness
Harm types
Economic/PropertyHuman or fundamental rights
AI system task:
Event/anomaly detectionReasoning with knowledge structures/planning

Articles about this incident or hazard