Police call it South Korea's first large-scale hacking case using generative AI. About 90 organizations and about 8.2 million records.
Confirmed victims
- About 90 organizations including academies, hospitals, golf courses, universities and subsidiaries of large companies (not named)
Attribution
- ARTEX basis
- The police press release does not name a tool. Decrypt says local reports named ARTEX, and AhnLab ASEC writes the same. Neither is the police's own wording.
- Actor
- Seoul Metropolitan Police Agency: the main suspect is 32, and 7 people were arrested.
- Same attacker?
- This and the financial case are two separate cases. No financial institutions are involved.
Figures and definitions
| Scope | About 90 organizations, about 8.2 million records (police) |
|---|---|
| Time | Aug 31 to Oct 13, "60 organizations in 44 days" (Decrypt); AI attacks on 60 organizations (SBS) |
Sources (4)
- 2026-10-28 Vendor AhnLab ASEC The Weak Link Identified by AI: October 2026, When the Outer Contact Point Collapsed
- 2026-10-26 Media SBS Biz 비전공자가 AI로 골프장·병원 등 개인정보 820만건 탈취, 협박
- 2026-10-26 Media Decrypt South Korea Arrests Seven in First Big AI-Assisted Hacking Case
- 2026-10-27 Media 서울경찰청 보도자료 AI로 업체 90곳 뚫어 개인정보 탈취하고 "돈 안 주면 유출"... 해킹 협박 일당 7명 검거