Korean financial firms add AI security staff as hacking incidents weigh
In short
Data a lawmaker obtained from South Korea's Financial Supervisory Service show information-security staffing at 34 financial companies rose 7.0% at the end of last year from the end of 2024, with 22 of the 34 adding people. Woori Bank, Hana Bank, NH Nonghyup Bank, Samsung Card, Samsung Fire and Mirae Asset Securities were among those that increased headcount, while KB Kookmin Bank and Shinhan Bank were among eight that cut it. Banks are recruiting specialists who can build AI security tools and analyse new attack methods, with industry officials saying headcount alone does not measure security capability.
Read the full story 2 min read
Financial companies in South Korea increased their information-security staffing and are recruiting specialists able to build AI security tools, after a series of hacking incidents, according to data a lawmaker obtained from the Financial Supervisory Service and reported by Yonhap and Maeil Business. At the end of last year the 34 companies surveyed had 7.0% more information-security staff than at the end of 2024, and 22 of the 34 added people. The data were submitted to People Power Party lawmaker Lee Yang-soo, according to both outlets. [ 1 , 2 ]
Several large institutions recorded notable increases. Woori Bank's security staff rose to 101 from 74 and Hana Bank's to 79 from 69, while NH Nonghyup Bank went to 118 from 114. Samsung Card grew to 49 from 37, Samsung Fire to 62 from 58 and Mirae Asset Securities to 38 from 33. Yonhap reported that the increase runs directly counter to financial companies' annual staff reductions under efficiency drives. [ 1 , 2 ]
Not all companies added staff. Yonhap's table of the Financial Supervisory Service data shows KB Kookmin Bank declining to 85 from 92 and Shinhan Bank to 95 from 97; eight companies in total reduced security headcount and four, including K Bank at 34, reported no change. [ 1 , 2 ]
Recruitment notices reflect demand for combined AI and security skills. Shinhan Bank sought experienced candidates to develop AI-based vulnerability diagnosis and source-code analysis tools, asking for at least 10 years in information security and at least two years leading AI tool projects. Hana Bank opened recruitment from the 22nd of last month for staff to establish and operate AI and blockchain security systems and analyse threats, requiring three or more years of security policy work. NH Nonghyup Bank recruited white hackers and staff for open-source vulnerability analysis, security architecture design and security data analysis, specifying mock hacking and vulnerability verification using real attack techniques. [ 1 , 2 ]
Industry officials quoted by Yonhap said headcount alone does not measure security capability, because automating security monitoring can raise efficiency with fewer people, and that expertise in developing and operating AI tools and analysing new attack methods will matter more. One official said securing customer trust through airtight security is more important than sales and that firms will likely focus on recruiting core talent such as AI specialists from the IT sector; another said competitive pay and treatment will have to be offered. Both outlets said security organisations could be reorganised around the year-end personnel round to respond to AI threats. [ 1 , 2 ]
Why it matters
The hiring push signals that Korean banks and insurers are treating AI-related security skills as a scarce resource as hacking incidents accumulate. Industry officials quoted in the coverage say competitive pay will be needed, which points to rising costs for security teams and possible organisational changes at the year-end personnel round. Headcount data alone does not settle whether security improves, since the documents note that automating monitoring can raise efficiency with fewer staff.
Key facts
- Information-security staffing at 34 financial companies was 7.0% higher at the end of last year than at the end of 2024. [ 1 , 2 ]
- Of the 34 companies, 22 increased security headcount. [ 1 , 2 ]
- Woori Bank's security staff rose to 101 from 74 and Hana Bank's to 79 from 69. [ 1 , 2 ]
- NH Nonghyup Bank went to 118 from 114, Samsung Card to 49 from 37, Samsung Fire to 62 from 58 and Mirae Asset Securities to 38 from 33. [ 1 , 2 ]
- Eight companies including KB Kookmin Bank and Shinhan Bank cut security staff, and four including K Bank were unchanged. [ 1 , 2 ]
- Shinhan Bank sought experienced hires to build AI tools for vulnerability diagnosis and source-code analysis, requiring 10 or more years in information security. [ 1 , 2 ]
- Hana Bank began recruiting from the 22nd of last month for staff to build and run AI and blockchain security systems. [ 1 , 2 ]
- A financial-industry official said securing customer trust through strong security is more important than sales. [ 1 ]
Confirmed by several sources
- Information-security headcount at 34 financial companies rose 7.0% year on year at the end of last year, with 22 of the companies adding staff. [ 1 , 2 ]
- The figures come from Financial Supervisory Service data obtained by People Power Party lawmaker Lee Yang-soo. [ 1 , 2 ]
- Woori Bank, Hana Bank, NH Nonghyup Bank, Samsung Card, Samsung Fire and Mirae Asset Securities increased security staff. [ 1 , 2 ]
- KB Kookmin Bank and Shinhan Bank were among eight companies that reduced security staff, while four including K Bank were unchanged. [ 1 , 2 ]
- Financial companies are recruiting AI-capable security specialists, and further hiring and organisational changes are expected to accelerate after recent hacking incidents. [ 1 , 2 ]
- Shinhan Bank, Hana Bank and NH Nonghyup Bank all ran experienced-hire recruitment for security roles last month. [ 1 , 2 ]
Still unclear
- Which hacking incidents prompted the hiring push Both documents refer only to a series of recent hacking incidents without naming any case, date or target.
- Whether security organisations will be reorganised in the year-end personnel round Both documents describe this as a possibility being raised, not a decision.
- Whether higher headcount means stronger security Industry officials cited in the documents say headcount alone is a poor measure because automated monitoring can raise efficiency; the documents give no assessment of capability.
- Whether pay increases or budgets are being committed A financial-industry official is quoted by one outlet as saying competitive pay must be offered, but no figures or decisions appear in the documents.