South Korean banks were likely hacked by a Chinese-based actor with an AI agent, CrowdStrike says

Live updates

1. 1h ago

   CrowdStrike Links South Korean Bank Hacks to China-Based AI User

   South Korean financial institutions face investigations following cyberattacks linked to artificial intelligence tools. Cybersecurity firm CrowdStrike identified a China-based suspect who allegedly utilized an AI agent and asked the Claude platform where to sell stolen data. The intrusions exposed records belonging to 60,800 people across multiple lenders, prompting government probes into the incidents. Authorities and analysts continue to examine the exact mechanics of how artificial intelligence assisted the threat actor during the financial network breaches.

   Why it matters

   Cybersecurity investigations increasingly focus on how malicious actors leverage artificial intelligence tools to automate attacks and process stolen information. The incident highlights emerging risks for the banking sector as threat actors adopt commercial and foreign AI models to target financial infrastructure. South Korean authorities opened formal probes into the breaches following presidential remarks regarding artificial intelligence involvement.

   What is confirmed

   • South Korean banks were targeted in cyberattacks that exposed records for 60,800 people.
   • CrowdStrike stated that a China-based suspect used artificial intelligence tools and an AI agent in the South Korean bank hacks.
   • The hacker asked Claude where to sell the stolen data, according to CrowdStrike.
   • South Korea opened a probe into AI-linked cyberattacks affecting Hana, KB Kookmin, Shinhan and Woori banks after President Lee flagged AI involvement.

   Still unconfirmed

   • The suspect behind the recent cyberattacks at South Korean banks was a China-based 26-year-old.

   What to watch next

   • Official findings from South Korean government investigations into the affected lenders
   • Additional technical disclosures from cybersecurity firms regarding the AI-driven tools used in the breaches
   Sources used for this update (11)

   1. WSJ — Hackers Use Chinese AI Tool to Hit South Korean Banks, Exposing New Risk
   2. The New York Times — South Korea Investigates Possible Use of A.I. in Hackings on Its Banks
   3. Reuters — CrowdStrike says China-based suspect used AI tools in South Korean bank hacks
   4. NewsNation — Banks increasingly under AI attack: How can you stay safe?
   5. Yahoo — Korean Bank Hacker Asked Claude Where to Sell the Stolen Data, CrowdStrike Says
   6. www.ntd.com — South Korean Banks Were Likely Hacked by a China-Based Actor With an AI Agent, CrowdStrike Says
   7. shattered.io — South Korea Probes AI-Linked Bank Hacks at 4 Lenders [2026]
   8. biz.chosun.com — Chinese AI powers hacks on South Korea’s banks, exposing 60,800 people
   9. www.yahoo.com — South Korean banks were likely hacked by a Chinese-based ...
   10. www.globalbankingandfinance.com — CrowdStrike: China-Based Suspect Used AI in South Korean Bank ...
   11. www.crowdstrike.com — Unknown Threat Actor Uses AI-Driven ARTEX to Target South ...
   confidence 90%