South Korea’s financial industry has encountered a new wave of cyberattacks affecting leading brokerages and a prominent crypto exchange, amid rising concerns over AI-powered cyber threats spreading across the region.
- Personal data of nearly 39,000 Daishin customers exposed
- Regulator orders tighter cybersecurity and private sector system checks
- AI-based hacking tools suspected in prior South Korea attacks
What happened
In late October 2026, a new wave of cyberattacks hit South Korea’s financial sector targeting major firms including Daishin Securities, Mirae Asset Global Investments, and the cryptocurrency exchange Bithumb. Daishin confirmed that personal information—such as names, email addresses, and phone numbers—of approximately 38,490 customers was exposed. Both Mirae Asset and Bithumb acknowledged cybersecurity incidents but did not disclose data breaches.
These attacks follow a similar series of cyber intrusions in September thought to originate from a China-based hacker using an AI-enhanced penetration testing tool known as Artex. South Korean authorities are investigating the most recent breaches to determine their origin and impact, while the affected companies have initiated cooperation and notifications to customers.
Why it matters
The recurring cyberattacks underscore the increasing vulnerability of South Korea’s financial infrastructure to sophisticated AI-driven hacking methods. This threat extends beyond traditional banking systems to encompass brokerages and crypto exchanges, amplifying risks for a broad array of financial services players in the region.
In response, South Korea’s financial regulatory body has urged firms to reinforce their cybersecurity defenses. It also plans comprehensive security evaluations of private sector IT systems, acknowledging that longstanding cybersecurity gaps have contributed to the heightened risks faced by financial institutions across Asia.
What to watch next
Ongoing investigations by South Korean authorities will seek to establish conclusive links between recent incidents and the suspected AI-assisted hacking campaigns identified in previous months. The outcomes may influence regional cybersecurity cooperation and policies addressing emerging AI threats.
Financial institutions and government agencies across Asia, including neighboring Japan, which recently reported a related cybersecurity event, will likely intensify their defense measures. Industry observers should monitor regulatory responses, technological countermeasures, and any disclosures on breaches affecting customer data or operational integrity.