S. Korea warns of AI-aided hacking after bank data breaches

The South Korean government has demanded a comprehensive overhaul of safeguards against hackers following recent cyber breaches at seven major financial institutions, leaking private data of thousands of customers. The breaches extended beyond finance, as two major churches and Korea Electric Power Corp. confirmed unauthorized access to their online systems.

Prime Minister Han Seong-sook called for swift measures to halt further leaks, stating that AI-powered hacking could cause secondary damage. The government, public institutions, financial sector, and private enterprises all need to remain vigilant. Early reports suggest the attack may have originated in China, but South Korean authorities identified IP addresses in the US, Japan, Germany, and 10 other countries.

South Korean officials emphasize that Chinese-built tools don't necessarily imply Chinese attackers. The hackers exploited weak authentication protocols in external loan recruiter portals, employees' mobile tools, and sales-support systems. Data belonging to up to 68,000 customers was stolen, including names, phone numbers, income figures, loan limits, and a small number of national identification numbers.

Experts warn that this incident extends beyond privacy concerns, as stolen information could be used for financial fraud, identity theft, and targeted phishing attacks. Furthermore, AI-assisted cyberattacks could lower barriers for malicious actors, making them more frequent and potentially affecting various sectors like hospitals, government agencies, energy infrastructure, and telecommunications networks.