South Korean authorities are investigating reported cyberattacks against financial institutions after President Lee Jae Myung said signs of possible artificial-intelligence use had emerged in some cases. That is not confirmation that AI agents caused the attacks: officials had not identified a responsible group or disclosed the full scale of the breaches in reports published October 6, 2026.
What did President Lee say about AI?
Lee said: “In some hacking cases, details have emerged of the possible use of artificial intelligence (AI), causing the people to feel great concern and anxiety.” His wording points to a possibility under investigation, not a finding that AI was used in every incident—or that AI agents independently carried out the intrusions.
As an Amazon Associate I earn from qualifying purchases.
Lee also called for a shift from reacting after incidents to preventing them, saying: “It is difficult to respond to evolving cyber threats by handling accidents after they happen,” and, “We must have the security capabilities to detect and block attacks in advance.” He called for faster investigation, reduced harm, and stronger proactive defenses, including cybersecurity AI tools.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Which financial institutions were reported affected?
Yonhap reported that attacks exposed customer information at seven companies, naming Hana Bank, KB Kookmin Bank and Shinhan Bank. Reuters also named Shinhan and KB Kookmin, and relayed Yonhap’s report that Hana and Woori suffered breaches. Aju Press described incidents involving financial organizations and said employee-facing and support systems appeared to be targets in some cases; those details are its reporting, not a final official account.
#1 Best Overall
The reports do not establish a complete list of affected organizations or settle whether the incidents involved core banking systems, peripheral services, or both. The available accounts describe multiple reported breaches, not a finalized incident inventory.
What are investigators examining?
Yonhap reported that police opened an investigation and formed a 28-member team to examine suspected violations of the information and communications network law. Aju Press reported that investigators were examining whether AI agents automated parts of the attacks. It also said some incidents appeared not to involve AI and that officials had not established one responsible group. These are developing investigative questions, not confirmed conclusions.
Rank #2
Reuters reported that authorities had not disclosed which AI tools, if any, may have been involved, or the full scale of the breaches. The reports do not provide a validated measure of AI’s contribution to these specific attacks.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →How many customers may have been exposed?
The Record reported on October 6 that at least 68,000 people were affected across at least seven financial institutions. That is a reported exposure figure attributed to the outlet, not a final official tally. Reuters likewise said the full scale had not been disclosed, so the number should not be treated as a confirmed total.
Rank #3
Why do reports give different IP-address counts?
Reuters reported that the Financial Supervisory Service and Financial Security Institute shared information about 28 unique IP addresses with the financial sector. The Record, citing local news reports, gave a figure of 33 IP addresses. The accounts do not explain whether these counts cover different scopes or reporting times; they should remain separate rather than be combined or treated as contradictory final measurements.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What is established—and what remains open?
- Established in the cited reporting: Police launched an investigation, with Yonhap reporting a 28-person team, and multiple financial organizations were reported affected.
- Not established: That AI agents caused every breach, which tools may have been used, who was responsible, the complete set of affected institutions, and the final number of people whose information was exposed.
- Still under examination: Whether AI automated parts of some attacks and how the incidents reached employee-facing, support, or other systems.
These distinctions matter because reports of possible AI involvement are not a measure of how much AI contributed. The investigation remains developing as of the October 6, 2026 reports.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Recommended Free Tools
