South Korea PM orders swift probe into suspected AI-linked data hack
In short
Prime Minister Han Sung-sook chaired a meeting in Seoul on Oct 6 on personal information leaks at financial and public institutions, calling the situation serious and ordering a swift investigation. Police said they booked the case under the Information and Communications Network Act and set up a 28-member investigation team. Han also ordered a full review of security and personal information protection systems and supervision of compensation for those affected.
Read the full story 2 min read
Prime Minister Han Sung-sook chaired a meeting at the Government Complex Seoul in Jongno-gu, Seoul, on Oct 6 on personal information leaks at financial and public institutions. In her opening remarks, Han said the attack targeted not financial institutions’ main computer systems but some external weak points, and that it is presumed to have used artificial intelligence. She called the situation serious because AI could be used for phishing and lead to second-round damage, and said she is greatly concerned that similar hacking could spread to industry and the public sector. [ 2 , 6 , 7 ]
“I ask the police to concentrate all capabilities with related agencies and swiftly investigate the hacking group,” Han said. She ordered the Financial Services Commission to determine exactly the scope of leaked personal information, analyze the cause and prepare countermeasures, and to supervise and support the financial companies in thoroughly carrying out customer protection and compensation. She also asked the science ministry and the Personal Information Protection Commission to check that industry and public institutions strengthen preventive measures and can respond quickly, and said the country’s personal information protection certification systems should be comprehensively reviewed. Noting that false information and fake news about hacked deposit account information is spreading on social media, she called for transparent provision of information. [ 6 ]
The Police National Investigation Headquarters said on Oct 6 that it had confirmed the objective facts of the financial institution hacking case and booked it on suspicion of violating the Information and Communications Network Act, according to Newsis. Police formed a dedicated investigation team of 28 people in four units and began a formal investigation, and are reviewing whether the case qualifies for notification to the Serious Crimes Investigation Agency. Newsis reported the incident had spread to secondary financial institutions, naming Shinhan, KB Kookmin, Hana and BNK Busan in the readable portion of its report. [ 3 ]
Business outlets covered the meeting largely through photo items, showing Han attending with a stern and then a dark expression, and one showing acting police chief Kim Jong-chul taking part. [ 1 , 4 , 5 , 7 ]
Why it matters
The prime minister said similar attacks could spread beyond finance to industry and the public sector, and that existing security and inspection systems are hard-pressed to counter them, making a full overhaul urgent. The case has put personal information protection certification systems up for review and placed financial firms’ customer protection and compensation under government supervision.
Key facts
- Prime Minister Han Sung-sook chaired a meeting at the Government Complex Seoul in Jongno-gu on Oct 6 on personal information leaks at financial and public institutions. [ 2 , 4 , 6 , 7 ]
- Han said the attack did not hit financial institutions’ main computer systems but some external weak points, and is presumed to have used artificial intelligence. [ 6 ]
- Han ordered police to concentrate all capabilities with related agencies and swiftly investigate the hacking group. [ 3 , 6 ]
- Han ordered the Financial Services Commission to determine the exact scope of leaked personal information, analyze the cause and supervise financial firms’ customer protection and compensation. [ 6 ]
- Han said security and inspection systems and personal information protection certification systems should be comprehensively reviewed and reorganized. [ 6 ]
- Police said they booked the case for alleged violation of the Information and Communications Network Act and formed a 28-member team of four units. [ 3 ]
- Acting police chief Kim Jong-chul attended the meeting. [ 5 ]
Confirmed by several sources
Still unclear
- The full list of affected financial institutions and the exact scope of leaked personal information. Newsis’s readable text lists Shinhan, KB Kookmin, Hana and BNK Busan but is cut off; the prime minister said the Financial Services Commission must still determine the exact scope.
- Whether the attack was actually carried out using artificial intelligence. The prime minister said it is presumed to have used AI; the documents do not confirm it.
- Whether the case will be referred to the Serious Crimes Investigation Agency. Newsis reported police are reviewing whether it meets the criteria for notification; no decision was reported.
- Police said they booked the case for alleged violation of the Information and Communications Network Act and formed a 28-member, four-team investigation unit. Reported by a single source so far
What local media are saying
Timeline, local time
- Asia Economy publishes a photo item of Prime Minister Han Sung-sook attending the meeting with a stern expression. [ 1 ]
- Asia Economy publishes a photo item saying Han chaired the meeting on financial and public institution personal information leaks. [ 2 ]
- Newsis reports police formed a 28-member, four-team investigation unit and opened a formal investigation. [ 3 ]
- Yonhap reports Han’s opening remarks ordering a swift investigation and supervision of compensation. [ 6 ]
- Asia Economy publishes a photo item of Han attending the meeting with a dark expression. [ 7 ]