Severity major: More than 90 businesses were hacked and 8.2 million personal records stolen, with 38 companies reporting losses.
Happened 2025-09 · Earliest source we hold 2026-10-26
A cybercrime ring allegedly used AI tools to hack over 90 entities including hospitals, private academies and businesses, stealing 8.2 million pieces of personal data and internal records from September last year until recently. Police said 38 targets suffered losses and the group demanded a combined 360 million won. Seven suspects were identified, and the 32-year-old ringleader was referred to prosecution.
Risk grouping: Not yet classified
No source we hold states: who caused it, intended or not, before or after release, the ai's part.
The story
1 · What it was doingA cybercrime ring used an AI coding agent and an autonomous AI penetration-testing system to attack the websites of academies, hospitals, golf courses and universities, taking personal data and internal documents.
2 · What went wrongThe AI tools were used to breach more than 90 companies' websites and steal 8.2 million pieces of personal data, crossing the boundary of unauthorized access to victims' systems.
3 · What it reached or didData from over 90 businesses was taken, including 1.22 million records from a funeral services provider and minors' personal information from academies; victims were then threatened by email, calls and texts.
4 · How it was caughtPolice opened an investigation in June after a complaint from one victimized company, then ran a comprehensive investigation as similar cases mounted nationwide.
5 · What was donePolice arrested the ringleader and accomplices, seized a laptop, burner phones and a wireless router, and recovered the stolen data; they plan to identify more victims and trace proceeds.
AI coding agent and an autonomous AI penetration testing system
C one secondary source states it
How much it acted alone
it acted alone, unwatched
D inferred by us from the described behaviour, reason shown
How it was connected
agent with tools
D inferred by us from the described behaviour, reason shown
What it was for
autonomous AI penetration testing system
C one secondary source states it
What happened
When it happened
2025-09-01
C one secondary source states it
Earliest source we hold
2026-10-26
A the date the source itself carries
Who caught it
the victim
D inferred by us from the described behaviour, reason shown
Who was responsible
an outside party
D inferred by us from the described behaviour, reason shown
Who caused it
an outside attacker
C one secondary source states it
What went wrong
security breach
D inferred by us from the described behaviour, reason shown
AI agent
an AI agent acted
C one secondary source states it
Impact
Records exposed
8,200,000
C one secondary source states it
Other parties affected
38
C one secondary source states it
Severity
major
D inferred by us from the described behaviour, reason shown
Kind of harm
privacy, money, others' security
C one secondary source states it
Who was affected
"more than 90 businesses, including an affiliate of a large conglomerate as well as private academies, hospitals and golf courses"; a funeral services provider lost 1.22 million records; data on minors was taken from private academies
C one secondary source states it
Kinds of data exposed
personal information
C one secondary source states it
Why this severity
More than 90 businesses were hacked and 8.2 million personal records stolen, with 38 companies reporting losses.
D inferred by us from the described behaviour, reason shown
Context
Country
South Korea
C one secondary source states it
LR-2026-0245 · version 2 · published 2026-10-26 after automatic checks; not yet checked field by field by a person · changes to this case · JSON