AI Risk Wire

Cases › security breach › LR-2026-0844

South Korean financial institution intrusions, with reports linking some attacks to ARTEX AI hacking tool

Also listed as: AI cyberattacks

Preliminary Why: Publisher not yet named · subject to change

Status: no action reported

Severity moderate
Reported 4 Nov 2026
Industry Finance and Insurance

No source states: money lost or records count, developer and model, could do, deployer.

Severity moderate: tier: data of other organisations (customer information at named banks) was touched, with scope stated as several named institutions.

Beginning in late September, hackers targeted several South Korean financial institutions. Reports linked some of the attacks to ARTEX, an AI-powered hacking tool that can help carry out cyberattacks. Customer information was exposed at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank.

What happened

No source tells the story step by step yet.

What was done

No source states an action or fix.

Risks

AI used to run a cyber attack
Primary103 incidents
Rising: 25 vs 4.2 a week
AI system attacked or breached
Also19 incidents

Sorted by rule from the case's fields; not yet read from the sources.

Controls

Not yet read for controls. Controls that mitigate the primary risk:

Model

Safety training and refusal · Cyber and weapons safeguards · Abuse monitoring and account enforcement · Staged or restricted release · Dangerous-capability testing before release · Outside red-teaming · Content safety classifiers · Safeguards kept on in testing · Reasoning monitoring

Infrastructure / target

Known flaws patched · Multi-factor sign-in and password policy · Network segmentation · Intrusion and endpoint detection · Backups and recovery · Phishing and fraud filters

Similar incidents

AI agent (ARTEX with Claude) used in cyberattacks targeting South Korean banks2026-10-05

All cases of this kind ›

Evidence

No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.

Show every field, with its source and grade

The AI system

What it was for
AI-powered hacking tool that can help carry out cyberattacks
C one secondary source states it

What happened

Earliest source we hold
2026-11-04
D inferred by us from the described behaviour, reason shown
Themes
AI assisted hacking, bank customer data exposure, financial institutions, South Korea
C one secondary source states it
Who caused it
an outside attacker
C one secondary source states it
What went wrong
security breach
C one secondary source states it

Impact

Severity
moderate
C one secondary source states it
Kind of harm
privacy
C one secondary source states it
Who was affected
Customer information at several institutions, including Shinhan Bank, Hana Bank, and KB Kookmin Bank
C one secondary source states it
Kinds of data exposed
personal information
C one secondary source states it
Why this severity
tier: data of other organisations (customer information at named banks) was touched, with scope stated as several named institutions.
C one secondary source states it

Context

Industry
Finance and Insurance
C one secondary source states it
Country
South Korea
C one secondary source states it

Notes on gaps

Included as an AI-enabled intrusion campaign by external attackers. Extractor proposed values without quotes; dropped: .

LR-2026-0844 · version 1 · published 2026-11-06 after automatic checks; not yet checked field by field by a person · JSON