Several financial institutions in South Korea are suspected of being attacked by AI, Claude Code reveals identity clues

South Korea suffered multiple data breaches in succession from the end of September to the beginning of October, involving at least seven financial institutions, including Shinhan Bank, Komin Bank and Asiana Bank. Among them, the personal information of about 25,000 customers of Shinhan Bank and about 40,000 customers of Yegaram Savings Bank was leaked, covering sensitive data such as names, contact numbers, annual income levels and loan limits, but no funds have been found. According to the investigation, the attack mainly targeted peripheral business systems such as banks 'inquiry systems for loan intermediary services and employee mobile office platforms. It is worth noting that the same IP address appeared in multiple incidents, and South Korean financial regulators speculated that it might have come from the same attack subject. On October 6, South Korean President Lee Jae-ming pointed out that the attack may have relied on artificial intelligence technology. On October 7, cybersecurity company CrowdStrike disclosed that the attacker used a server based in Hong Kong to operate and used the open source AI penetration testing tool ARTE deployed on another device.