South Korea’s financial industry hit by fresh wave of cyberattacks

Glass Epoch DeskOriginal digestSource: TechCrunch AI

AI-assisted digest, checked against the original source before publishing. How we work

South Korean brokerages and a crypto exchange report breaches weeks after attacks linked to an AI penetration-testing tool.
South Korea’s financial industry hit by fresh wave of cyberattacks
Photo: Ciaran O'Brien · free stock license

South Korea's financial industry absorbed another round of cyberattacks, hitting brokerages Daishin Securities and Mirae Asset Global Investments along with crypto exchange Bithumb. The incidents land roughly a month after an earlier wave struck South Korean financial firms, extending the pressure beyond the country's banking systems.

Daishin disclosed that the breach exposed personal information for 38,490 customers, covering names, email addresses and mobile phone numbers. The firm said it has notified those affected, is working with authorities on the investigation, and will compensate losses as the law requires. Mirae and Bithumb separately reported cybersecurity incidents on Wednesday, though local media noted neither has confirmed that customer data was taken.

For the earlier September wave, security researchers tied the attacks to a suspected China-based hacker who leaned on an AI penetration-testing tool called Artex. Officials are still investigating what caused the latest breaches, so the link between the two rounds remains unestablished.

The regional picture adds context. Japan reported a cybersecurity incident involving GMO Internet the day before, following attacks on its own financial institutions. Coverage attributes the broader Asian wave to years of weak cybersecurity, but investigators have not established any connection between the Korean and Japanese incidents. South Korea's Financial Services Commission, Daishin, Bithumb and Mirae did not immediately respond to requests for comment.

What to watch: whether investigators identify the root cause of the latest breaches and confirm or rule out any tie to the Artex-linked actor, and whether the planned private-sector security checks scale into mandatory controls. The open question for operators is whether regulator pressure produces faster patching and monitoring standards across Korea's brokerage and crypto platforms, or whether incidents keep arriving in clusters.

Key facts

  • • Daishin Securities breach exposed data of 38,490 customers.
  • • Mirae Asset and Bithumb reported incidents on Wednesday.
  • • September attacks linked to AI tool Artex, suspected China-based hacker.
  • • Regulator plans security checks on dozens of private-sector IT systems.
  • • Japan reported GMO Internet incident a day earlier.

Why it matters

Financial firms across Asia face a rising threat from AI-assisted penetration tooling, and regulators are responding with sector-wide security checks rather than firm-level fixes alone. Builders and operators should expect more frequent audits, potential mandatory baselines, and continued attribution uncertainty — planning for data exposure notifications and compensations should now be part of sta

Spotted an error? Send a correction.

Get the day's AI news in one email

The Daily Epoch · 60-second read · unsubscribe anytime

Related

Policy
MIT Technology Review3 min read

The climate case for AI has not been made

At the UN climate conference in Antalya, AI's promised emissions cuts are colliding with a thin public record of real deployment.