Severity moderate: Data of others (about 25,000 customers) was touched with a bounded scope stated: names, phone numbers, loan borrowing details and annual income.
Earliest source we hold 2026-10-05
Shinhan Bank said customer information was leaked after hackers gained access to its systems; the leaked information reportedly includes customers' names, phone numbers, loan borrowing details and annual income. Sources cited in reports said the attackers may have used advanced AI tools. South Korea's Financial Supervisory Service launched an emergency on-site inspection.
Risk grouping: AI used to exploit
Who caused it
A person or organisation “Shinhan Bank said the information was leaked on Wednesday after hackers gained access to its systems.”source
Intended or not
Intended “Sources cited in the reports said the attackers are suspected to be based overseas and may have used advanced AI tools during the attack.”source
Before or after release
After release “Shinhan Bank said the information was leaked on Wednesday after hackers gained access to its systems.”source
The AI's part
Used as a tool “Sources cited in the reports said the attackers are suspected to be based overseas and may have used advanced AI tools during the attack.”source
The story
1 · What it was doingShinhan Bank was running its banking systems serving customers in South Korea; hackers gained access to those systems and leaked customer data.
2 · What went wrongHackers gained access to the bank's systems and leaked personal and financial information of about 25,000 customers, breaching the bank's system boundary.
3 · What it reached or didNames, phone numbers, loan borrowing details and annual income of about 25,000 customers in South Korea were exposed.
4 · What was doneThe bank formed a response team, blocked external IP access, suspended affected services, and said it completed safety measures; the Financial Supervisory Service launched an on-site inspection.
D inferred by us from the described behaviour, reason shown
Impact
Severity
moderate
D inferred by us from the described behaviour, reason shown
Who was affected
about 25,000 customers in South Korea
C one secondary source states it
Kinds of data exposed
personal information, financial
C one secondary source states it
Why this severity
Data of others (about 25,000 customers) was touched with a bounded scope stated: names, phone numbers, loan borrowing details and annual income.
D inferred by us from the described behaviour, reason shown
Context
Industry
Finance and Insurance
D inferred by us from the described behaviour, reason shown
Country
South Korea
C one secondary source states it
Notices made
South Korea’s Financial Supervisory Service has launched an emergency on-site inspection as authorities investigate how the breach occurred and whether the suspected use of AI points to a wider risk for financial institutions.
C one secondary source states it
LR-2026-0127 · version 5 · published 2026-10-25 after automatic checks; not yet checked field by field by a person · changes to this case · JSON