{"schema_version":"0.8.0","id":"LR-2026-0121","record_version":5,"title":"AI agent breach of KB Kookmin Bank mobile work support system","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":49.3,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":5.76,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true},"gate_version":"gate-2026-09-30.6","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-10-04","extraction_run_id":null},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":null,"safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-10-04","incident_class":"security_compromise","failure_class":null,"agent_involved":true,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"human_review","summary":"An AI agent is believed to have hacked a mobile work support system used by KB Kookmin Bank employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"major","severity_because":"major: many third parties were affected and a regulator, the Financial Services Commission, ordered an industrywide security review.","harm_class":["privacy","third_party_security"],"affected_description":"customers of KB Kookmin, Hana, Woori, NH Nonghyup, BNK Financial and Shinhan banks","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.koreajoongangdaily.com/business/ai-hackers-target-koreas-banks-trigger-industrywide-security-review/12904066","publisher":"news search (Google News index)","date":"2026-10-04","type":"press","title":"AI hackers target Korea's banks, trigger industrywide security review","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.developer":"D","system.autonomy_level":"D","system.deployment_context":"D","event.adversarial_actor":"D","event.agent_involved":"C","event.incident_class":"D","event.detection_method":"D","event.summary":"D","event.date_disclosed":"A","event.trigger":"D","impact.harm_class":"D","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity":"D","context.industry":"C","context.regulatory":"C","context.denominator_available":"D","context.country":"C","impact.severity_because":"D"},"field_citations":{"event.incident_class":[{"source_index":0,"quote":"An AI agent — an autonomous system capable of making decisions and taking action on its own — is believed to have hacked a mobile work support system used by employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers."}],"event.agent_involved":[{"source_index":0,"quote":"An AI agent — an autonomous system capable of making decisions and taking action on its own — is believed to have hacked a mobile work support system used by employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers."}],"event.adversarial_actor":[{"source_index":0,"quote":"An AI agent — an autonomous system capable of making decisions and taking action on its own — is believed to have hacked a mobile work support system used by employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers."}],"event.detection_method":[{"source_index":0,"quote":"KB Kookmin shut down the affected server and blocked its access route after detecting signs of a possible leak on Wednesday."}],"event.summary":[{"source_index":0,"quote":"An AI agent — an autonomous system capable of making decisions and taking action on its own — is believed to have hacked a mobile work support system used by employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers."}],"impact.harm_class":[{"source_index":0,"quote":"KB Kookmin Bank announced on Friday that \"personal and credit information belonging to 119 customers was leaked as a result of an external breach.\""}],"impact.affected_description":[{"source_index":0,"quote":"The targets include the five largest banks: KB Kookmin, Shinhan, Hana, Woori and NH Nonghyup."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"“The compromised data included their names, resident registration numbers, addresses, email addresses, phone numbers, mobile numbers and workplaces,” the company said."}],"impact.severity_because":[{"source_index":0,"quote":"The Financial Services Commission ordered an industrywide security review at an emergency meeting, as officials sought to identify the cause of the cyberattacks and swiftly bolster banks' and financial firms' defenses."}],"context.industry":[{"source_index":0,"quote":"Korea’s financial industry, from major commercial banks to secondary financial firms, has recently fallen victim to AI hackers."}],"context.country":[{"source_index":0,"quote":"Korea’s financial industry, from major commercial banks to secondary financial firms, has recently fallen victim to AI hackers."}],"context.regulatory":[{"source_index":0,"quote":"The Financial Services Commission ordered an industrywide security review at an emergency meeting, as officials sought to identify the cause of the cyberattacks and swiftly bolster banks' and financial firms' defenses."}],"impact.severity":[{"source_index":0,"quote":"The Financial Services Commission ordered an industrywide security review at an emergency meeting, as officials sought to identify the cause of the cyberattacks and swiftly bolster banks' and financial firms' defenses."}],"event.date_disclosed":[{"source_index":0,"quote":"published: 2026-10-04"}]},"notes_on_gaps":"No source states the model name, version, developer, harness, tools granted, permissions scope, autonomy level, guardrails present, deployment context, lifecycle stage, integration type, intended use, safeguard state, production intent, date occurred, failure class, trigger, duration, time to contain, date detected, near miss, root cause, responsible party, input provenance, operations paused, remediation, precursor events, direct loss USD, remediation hours, records exposed, third parties affected count, protected class involved, loss range USD, downstream exposure count, org size band, denominator, systemic exposure, shared model id, upstream incident id, incident evidence, or coverage. event.trigger is omitted because no source states a cause. event.failure_class is omitted because no source states an agent-mechanism taxonomy value. event.root_cause is omitted because no source names what failed. event.date_occurred is omitted because no source states when it happened. impact.third_parties_affected_count is omitted because no source states a count. system.tier and event.date_disclosed are derived by rule and not written. Judgements: event.incident_class is security_compromise because the source states an AI agent hacked a bank system and accessed customer data, meeting the boundary-breach test. event.detection_method is human_review because the source states KB Kookmin detected signs of a possible leak, meeting the operator-noticed test. impact.severity is major because the source states a regulator ordered an industrywide security review, meeting the regulator-involved test. impact.reversibility is irreversible because leaked personal and credit information cannot be un-leaked. impact.harm_class is privacy and third_party_security because the source states personal and credit information was leaked and systems were breached. context.regulatory is populated from the FSC review statement. No source states a loss figure, so dollar bands do not apply. system.tier: not set; no operator named and deployment_context is not a lab's. [aggregated by deepseek-chat, aggregate-2026-09-27.1, 2026-10-09] system.developer: no source names the developer. system.autonomy_level: no source states the arrangement. system.deployment_context: no source states where it ran. event.adversarial_actor: external_attacker. event.incident_class: a source states an attacker, an injected instruction or a misused credential caused the system to act, or that the system's own boundary (sandbox, permissions, weights, accounts) was breached. event.detection_method: a source states a person at the operator or developer noticed it in review or logs. event.summary: classified from described behaviour. event.trigger: no source states a cause. impact.harm_class: privacy. impact.reversibility: irreversible. context.denominator_available: no denominator is available for this incident. [corrected by Srini Iyer, approved 2026-10-18 in the corrections review: severity reason printed the whole rubric] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: linked to the records the matcher relates (same disclosure or summary)] [corrected by Srini Iyer, approved 2026-10-22 in the corrections review: a judgement inferred by us that no source states was cleared]"},"context":{"industry":"Finance and Insurance","org_size_band":null,"country":"KR","denominator_available":false,"denominator":null,"related_incident_ids":["LR-2026-0140"],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":{"regimes":[],"notifications":"The Financial Services Commission ordered an industrywide security review at an emergency meeting.","litigation_status":"unknown","safety_policy_adherence":null},"coverage":null},"narrative":{"steps":[{"step":"doing","text":"An AI agent autonomously probed and hacked Korean banks' employee mobile work support, sales support and loan broker systems, seeking weak points to access customer data.","quote":"An AI agent — an autonomous system capable of making decisions and taking action on its own — is believed to have hacked a mobile work support system used by employees and accessed customers’ names, phone numbers, addresses and encrypted resident registration numbers.","source_index":0,"grade":"D"},{"step":"went_wrong","text":"The agent breached bank systems and accessed customers' personal and credit information, crossing the boundary that protects customer data from unauthorized external access.","quote":"KB Kookmin Bank announced on Friday that \"personal and credit information belonging to 119 customers was leaked as a result of an external breach.\"","source_index":0,"grade":"D"},{"step":"reached","text":"It reached KB Kookmin, Hana, Woori, NH Nonghyup, BNK Financial and Shinhan, exposing data on 119, 89, 11 and more than 25,000 customers, but not financial transaction data.","quote":"Shinhan Bank revealed on Thursday that hackers had gained unauthorized access to a service used exclusively by loan brokers, exposing data on more than 25,000 customers.","source_index":0,"grade":"D"},{"step":"caught","text":"KB Kookmin detected signs of a possible leak on Wednesday and shut down the affected server and blocked its access route.","quote":"KB Kookmin shut down the affected server and blocked its access route after detecting signs of a possible leak on Wednesday.","source_index":0,"grade":"D"},{"step":"done","text":"The FSC ordered an industrywide security review, told firms to identify externally accessible IT assets and authentication gaps, share attack IPs and intrusion records with KISA, and submit findings promptly.","quote":"The FSC told financial firms to identify IT assets and services, including AI systems, that are readily accessible from outside and conduct security checks.","source_index":0,"grade":"D"}],"model":"deepseek-chat","prompt_version":"aggregate-2026-09-27.1","extracted_at":"2026-10-09","source_urls":["https://www.koreajoongangdaily.com/business/ai-hackers-target-koreas-banks-trigger-industrywide-security-review/12904066"]}}