{"schema_version":"0.10.0","id":"LR-2026-0844","record_version":1,"title":"South Korean financial institution intrusions, with reports linking some attacks to ARTEX AI hacking tool","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":44.1,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":0.0,"completeness":3.84,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-06","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"Publisher not yet named · subject to change","original_document":null,"reports_total":1,"reports_independent":0,"reports_derivative":0,"developing":true,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-06","history":[{"date":"2026-11-06","from_level":null,"to_level":"preliminary","reason":"Publisher not yet named · subject to change"}]},"sources_hash":"74626a2be9110a61c6365e4ae055f66b7f09171ceb986c0a329224aaded6b0bb"},"system":{"model_name":null,"model_version":null,"developer":"unknown","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"AI-powered hacking tool that can help carry out cyberattacks","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2026-11-04","incident_class":"security_compromise","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"Beginning in late September, hackers targeted several South Korean financial institutions. Reports linked some of the attacks to ARTEX, an AI-powered hacking tool that can help carry out cyberattacks. Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank. The article does not describe how the intrusions were detected, how long they lasted, how the AI tool was used, or what remediation followed.","tags":["ai-assisted-hacking","bank-customer-data-exposure","financial-institutions","south-korea"],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":"external_attacker","input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":null,"precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Moderate tier: data of other organisations (customer information at named banks) was touched, with scope stated as several named institutions.","harm_class":["privacy"],"affected_description":"Customer information at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank","protected_class_involved":null,"data_categories_exposed":["pii"],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.junonews.com/p/ai-cyberattacks-target-banks-worldwide","publisher":"Juno News","date":"2026-11-04","type":"press","title":"AI cyberattacks target banks worldwide","archived_url":null,"attachment":"first_report"}],"per_field_confidence":{"system.developer":"D","system.autonomy_level":"D","system.deployment_context":"D","system.intended_use":"C","event.date_disclosed":"D","event.trigger":"D","event.detection_method":"D","event.summary":"C","event.tags":"C","event.adversarial_actor":"C","event.incident_class":"C","impact.severity":"C","impact.harm_class":"C","impact.affected_description":"C","impact.data_categories_exposed":"C","impact.severity_because":"C","context.industry":"C","context.country":"C","context.denominator_available":"D"},"field_citations":{"system.intended_use":[{"source_index":0,"quote":"Reports linked some of the attacks to ARTEX, an AI-powered hacking tool that can help carry out cyberattacks."}],"event.summary":[{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."},{"source_index":0,"quote":"Reports linked some of the attacks to ARTEX, an AI-powered hacking tool that can help carry out cyberattacks."},{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"event.tags":[{"source_index":0,"quote":"Reports linked some of the attacks to ARTEX, an AI-powered hacking tool that can help carry out cyberattacks."},{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."},{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."}],"event.adversarial_actor":[{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."}],"event.incident_class":[{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."},{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"impact.severity":[{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"impact.harm_class":[{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"impact.affected_description":[{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"impact.data_categories_exposed":[{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"impact.severity_because":[{"source_index":0,"quote":"Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank."}],"context.industry":[{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."}],"context.country":[{"source_index":0,"quote":"In South Korea, several financial institutions were targeted by hackers beginning in late September."}]},"notes_on_gaps":"Included as an AI-enabled intrusion campaign by external attackers. The article does not describe an AI system failing, being compromised, or acting autonomously; ARTEX's role is stated only as 'reports linked', so agent_involved and failure_class are null and autonomy_level is unknown. The start date is given only as 'late September' with no day or year, so date_occurred is null. date_disclosed uses the collector-supplied publication date (2026-11-04), not a dated disclosure sentence in the text. No record counts, loss figures, detection method, containment time or developer of ARTEX are stated. Severity is moderate on a judgement that several named third-party banks' customer data was touched with bounded scope; the article does not state the number of institutions. Trigger is unknown because no cause is named. Attribution of specific attacks to ARTEX is weakly sourced ('reports linked'). Extractor proposed values without quotes; dropped: ['context.denominator_available', 'event.date_disclosed', 'event.detection_method', 'event.trigger', 'impact.reversibility', 'system.autonomy_level', 'system.deployment_context', 'system.developer']. Single secondary source; corroborate before upgrading any field to B. [2026-11-06: evidence level set: Preliminary (Publisher not yet named · subject to change)]"},"context":{"industry":"Finance and Insurance","org_size_band":null,"country":"KR","denominator_available":false,"denominator":null,"related_incident_ids":["LR-2026-0140"],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null}}