Overview
- Police launched a full-scale criminal investigation on Tuesday, Oct. 6, assigning a 28-member cyber team to examine breaches and possible violations of the information and communications network law.
- The Financial Supervisory Service circulated a shortlist of 28 suspect IP addresses linked to the incidents that span 12 countries and told firms to complete emergency checks and restrict nonessential external access.
- Data exposures at seven financial firms have affected roughly 66,000–68,000 people overall, with Shinhan Bank reporting about 25,000 customer loan records and Yegaram Savings Bank reporting about 40,000 affected.
- Security analysts have pointed to ARTEX, an open-source AI penetration‑testing framework, as a likely tool used to automate vulnerability scanning but officials say specific tools and attacker identities remain unconfirmed and IPs do not prove origin.
- Government leaders ordered faster development of AI‑focused cyber defenses, demanded sectorwide security overhauls, and emphasized consumer protection and possible compensation as authorities work to contain follow‑on phishing and fraud risks.