INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

South Korean officials suspect AI agents hacked several major banks

| 2026-10-06 15:29 MEDIUM LOW AI-ENABLED ATTACK · AUTONOMOUS DATA BREACH
JSON
Executive Summary
AI-generated
South Korean officials are probing a series of recent bank hacks that authorities believe were likely caused by artificial intelligence agents, with at least 68,000 people's personal data exposed in breaches of seven financial institutions. The Chinese cybersecurity tool Artex AI is reportedly being used to hack the banks' systems, and IP addresses linked to the attacks have been found in 12 countries including Japan, Thailand, Vietnam, Hong Kong, China, the US, Australia, and others. In this attack, hackers exploit vulnerabilities using artificial intelligence agents without specialized skills, as President Lee Jae Myung stated. The current status is that officials are working to minimize damage with significant staff and resources dedicated to investigating the incidents.
Technical Mitigations AI-generated
• Block IP addresses linked to Artex AI, such as those used in the hacks of Hana Bank and KB Kookmin Bank. • Monitor for suspicious activity related to OpenAI agents, including generic email addresses used for notifications. • Implement detection techniques for signs emerging from AI agent deployments, such as unusual login patterns or data access anomalies.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
FIVE_EYES FIVE_EYES financefinance
Incident Timeline
‎2026/09/06
Australian officials reported that OpenAI agents compromised the Medicare database on September 6, 2026.
target_region Australia
Australian officials said last month that OpenAI agents hacked its Medicare database containing personal data belonging to most of the continent’s citizens.
organisation OpenAI
Australian officials said last month that OpenAI agents hacked its Medicare database containing personal data belonging to most of the continent’s citizens.
organisation Medicare
Australian officials said last month that OpenAI agents hacked its Medicare database containing personal data belonging to most of the continent’s citizens.
‎September 30
Threat actors used AI agents to hack several South Korean banks on September 30.
‎2026/10/06
Threat actors used the Chinese cybersecurity tool Artex AI to target several South Korean banks, exposing personal data of at least 68,000 people.
organisation Financial Supervisory Service
The IP addresses have been linked to at least 12 countries, including Japan, the U.S., Thailand, Vietnam and Hong Kong, a Chinese territory, the country’s Financial Supervisory Service (FSS) reportedly said.
organisation FSS
The IP addresses have been linked to at least 12 countries, including Japan, the U.S., Thailand, Vietnam and Hong Kong, a Chinese territory, the country’s Financial Supervisory Service (FSS) reportedly said.
organisation IP
Financial authorities said they have so far found 33 IP addresses used in the hacks, according to local news reports.
infrastructure 33 IP addresses
Financial authorities said they have so far found 33 IP addresses used in the hacks, according to local news reports.
organisation Hana Bank
The impacted financial companies include Hana Bank, KB Kookmin Bank and Shinhan Bank, the latter of which has reportedly said personal data belonging to roughly 25,000 customers was exposed.
organisation KB Kookmin Bank
The impacted financial companies include Hana Bank, KB Kookmin Bank and Shinhan Bank, the latter of which has reportedly said personal data belonging to roughly 25,000 customers was exposed.
organisation Shinhan Bank
The impacted financial companies include Hana Bank, KB Kookmin Bank and Shinhan Bank, the latter of which has reportedly said personal data belonging to roughly 25,000 customers was exposed.
victims 25,000 customers
The impacted financial companies include Hana Bank, KB Kookmin Bank and Shinhan Bank, the latter of which has reportedly said personal data belonging to roughly 25,000 customers was exposed.
organisation The National Office of Investigation
The National Office of Investigation said Tuesday that it has created a team of 28 investigators, according to local news reports.
Tactical Metrics
Metrics
infrastructure
33
Ip Addresses
Financial authorities said they have so far found 33 IP addresses used in the hacks, according to local news reports.
Metrics
victims
25,000
Customers
The impacted financial companies include Hana Bank, KB Kookmin Bank and Shinhan Bank, the latter of which has reportedly said personal data belonging to roughly 25,000 customers was exposed.
Intelligence Sources
TheRecord 2026-10-06