Fresh Wave of Cyber Intrusions Hits South Korean Financial Institutions, Highlighting Rising AI-Driven Hacking Risks Across Asia

A new string of coordinated cyberattacks has targeted South Korea’s financial ecosystem, drawing widespread attention to the fast-growing threat of AI-augmented hacking operations spreading across the broader Asia region. The latest wave of breaches has impacted three major local players: brokerage firm Daishin Securities, asset manager Mirae Asset Global Investments, and leading domestic crypto exchange Bithumb.

This latest surge of attacks arrived roughly one month after a prior campaign of cyber intrusions that targeted South Korean financial entities, sparking widespread concern that critical security vulnerabilities extend far beyond the country’s core banking systems. Cybersecurity researchers previously tied the September series of South Korean attacks to a suspected China-based threat actor that utilized an AI-powered penetration testing tool dubbed Artex, though relevant authorities are still actively investigating the exact root cause and attribution of the newest breaches.

Per local South Korean news disclosures, Daishin Securities reported that the recent breach exposed the personal identifiable information of 38,490 of its customers, including full names, registered email addresses, and mobile phone numbers. The firm has already sent formal notifications to all impacted users, is fully cooperating with regulatory and law enforcement teams on the ongoing investigation, and has committed to compensating all verified customer losses in full as required by national financial regulations.

Local media outlets also confirmed that Mirae Asset Global Investments and Bithumb both reported separate, unconnected cybersecurity incidents on the same Wednesday of the announcements, though neither organization has publicly confirmed that any customer data was successfully exfiltrated during their respective security events.

Regulatory and Regional Response

South Korea’s top financial regulator issued a public call for all licensed financial firms to immediately upgrade their cybersecurity safeguards on Wednesday, in response to a months-long string of high-profile breaches targeting both private financial companies and government agencies based in Seoul. The national government also revealed plans to conduct mandatory full security audits on dozens of private-sector IT systems across the financial and digital asset industries in the near future.

The wave of regional cyber incidents is not contained to South Korea: just one day after the latest South Korean breach disclosures, Japan reported a major cybersecurity incident targeting internet services provider GMO Internet, which followed a separate series of hacking attempts aimed at Japanese financial institutions. While investigators have not yet established a confirmed technical link between the separate Northeast Asian breach events, the overlapping attacks highlight the mounting systemic cybersecurity challenges across the region, many of which have been exacerbated by years of underinvestment in threat defense and reliance on unpatched legacy IT systems.

At time of publication, formal requests for comment sent to South Korea’s Financial Services Commission (FSC), Daishin Securities, Bithumb, and Mirae Asset Global Investments had not received an immediate response.