Science & Tech · Cybersecurity · 2 hrs ago
Cyberattacks hit 16 South Korean financial firms, investigation returns to police
Cyberattacks were confirmed at 16 South Korean financial firms, spanning banks, payment companies and cryptocurrency businesses.
About 100,000 records were exposed, but authorities said they had not confirmed leaks of account passwords or card numbers that could be used directly for fraud.
Investigators are checking whether the incidents are connected and whether attackers used AI; that has not been established.
The attacks exposed weaknesses in basic security checks, with 130 of 555 firms reporting items that needed improvement.
Some breaches involved support systems used by staff and loan agents, rather than core banking services.
A major-crimes agency declined to open a case, sending it back to the National Police Agency, which will continue the investigation.
Authorities are still examining the attack methods and whether AI was involved, and the number of affected firms could rise.
Cyberattacks were confirmed at 16 South Korean financial firms across several sectors, with about 100,000 records exposed.
The investigation returned to the National Police Agency’s National Office of Investigation after the Seoul Metropolitan Office of the Serious Crimes Investigation declined to open an investigation.
Police had handled the case since October 6, and the decision to return it was communicated on October 23.
Authorities have not confirmed that artificial intelligence was used in every attack.
Financial regulators are investigating the attack methods, links between incidents and possible use of AI.
- Who
- Sixteen financial firms in South Korea were affected. The National Police Agency’s National Office of Investigation is continuing the investigation.
- What
- Cyberattacks exposed about 100,000 records. The investigation was returned to police after another agency declined to open it.
- When
- The handback was communicated on October 23, 2026. Police had handled the case since October 6.
- Where
- South Korea.
- Why
- The Seoul Metropolitan Office of the Serious Crimes Investigation notified police that it would not open an investigation. The reason was not stated.
This story does not have two clearly opposing sides.
The National Office of Investigation began handling the case.
The Financial Services Commission discussed an interim count of attacks affecting 16 firms and about 100,000 records.
The Seoul Metropolitan Office of the Serious Crimes Investigation notified police that it would not open an investigation.
Chosun Ilbo reported that the National Office of Investigation would continue the investigation.
- Affected firms
- 16
- Exposed records
- About 100,000
- Police investigation began
- October 6, 2026
- Decision communicated
- October 23, 2026
- Firms’ self-checks
- 130 of 555 reported items needing improvement
3 sources
What people are saying
very painful