Cybercrime ring busted over AI-powered data theft targeting hospitals, businesses

A cybercrime ring targeting hospitals and businesses with AI-powered data theft has been dismantled by law enforcement officials, authorities announced on Monday. The group allegedly pilfered personal information and confidential records from over 90 organizations, including healthcare facilities, academies, and businesses, prior to their recent apprehension. Seoul Metropolitan Police Agency cited the seizure of 8.2 million pieces of personal data and further internal files belonging to 8.2 million individuals.

The cybercriminals are believed to have utilized AI tools to breach the security systems of 60 of the targeted entities, in addition to extorting some of them for financial gain. Among the victimized organizations, 38 suffered monetary losses, with the ring demanding a combined total of 360 million won ($272,000) from them in return for the stolen data.

The 32-year-old ringleader of this 32-person syndicate was handed over to the prosecution on Friday after being detained for physical examination. The remaining suspects are now subject to further questioning.

The alleged mastermind of the operation, a self-taught hacker, reportedly acquired his hacking skills while employed at a security company. In this capacity, the suspect oversaw simulated hacking exercises, underscoring his ability to exploit vulnerabilities in digital defenses. Authorities have been increasingly vigilant in combating cybercriminals who employ AI tools for malicious purposes.