What happened
CrowdStrike reported that a suspected Chinese-speaking attacker hit multiple South Korean financial institutions between late September and early October 2026, stealing more than 25,000 records at Shinhan Bank alone.
Why it matters
CrowdStrike says the case shows how AI tools can let a single person pull off massive breaches in a short window, the kind of cybersecurity risk experts have been warning about for months.
WHO IT HITSSouth Korean financial institutions and their customers are directly affected, with stolen data including names, contact details, income, and credit limits. Security teams at banks and financial regulators worldwide may need to assess similar AI-assisted penetration tools, according to CrowdStrike's assessment.
Summaries like this, in your inbox every morning.
The breach comes days after Anthropic documented that GLM-5.3 can write exploits nearly on par with Mythos Preview, Anthropic's frontier model and the one that sparked the entire debate in late March 2026. That timing suggests the capabilities of AI models used in cyberattacks are being tracked closely by security researchers, though the body does not state a direct link between Anthropic's finding and the South Korean incident.
Researchers also found Claude Code session logs on the attacker's open directories, showing searches for Telegram groups to sell stolen data. South Korea's financial regulator held an emergency meeting, and President Lee Jae Myung called for a thorough investigation. These responses indicate the incident is being treated as a serious national security matter, though the body does not specify what additional measures may follow.
Pick your industry and the AI tools you use, and get news related to your work every day.
Free · 30 seconds with Google · unsubscribe anytimeWhat is AIToday? →
Ask AI anything about this article. The AI reads this article, earlier AIToday articles, and Wikipedia, and cites its sources. Q&As are published on this page for other readers too.
A Qiita article compared automated red-teaming methods for LLM apps — GCG, PAIR, and TAP — using mock implemen…
In a webinar hosted by French Mathematical Society president Isabelle Gallagher, Fields Medal winner Hugo Dumi…
Anthropic said on October 15 it has started giving METR's six staff company devices, office space and access t…
NVIDIA published a blog post titled "AI Security Is an Engineering Problem - How to Solve It at Every Layer of…
At the Most Powerful Women Summit, Marissa Mayer said anyone who claims to know how AI will play out is 'eithe…
After its first meeting Thursday, the White House AI task force formally adopted its charter, opening a 120-da…
