buildOne report1 publisher Dev.to post blames Korean bank breaches on missing agent controls, including no isolation and session-wide approval
A dev.to post says a Chinese-speaking attacker used Artex AI and Claude agents to breach Shinhan, KB Kookmin and Hana banks in October 2026. It proposes runtime guards on tool calls, yet the CrowdStrike finding it cites puts the agent sessions on the attacker's own infrastructure.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+45
- Incentives
- Not scored
- Confidence30
President Lee Jae-myung ordered a full probe of hacks that exposed data at four Korean banks, including about 25,000 Shinhan Bank customers. The response runs through every financial industry association before the probe has shown whether the banks share a weak point.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 59%
- Investor
- Investor 19%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence60
Shinhan Bank exposed data on about 25,000 customers through a loan-broker inquiry platform kept apart from its core banking systems. Yonhap reports AI may have automated the credential stuffing, so the side systems that touch customer data are where lenders' security spending now gets tested.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 49%
- Investor
- Investor 27%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+25
- Incentives50
- Confidence60
Korea's National Police Agency booked the AI-driven attack on Shinhan Bank as a criminal case and assigned 28 cyberterrorism investigators to it. Whether the case moves to the new Serious Crimes Investigation Agency turns on how the Financial Services Commission classifies the bank's system.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence55
Customers of seven hacked Korean lenders start recruiting for class-action suits
Victims of breaches at seven Korean lenders, Shinhan Bank among them, are recruiting members for class-action damages suits. With suspects in earlier Korean data cases still uncaught, the lenders look like the only parties those suits can reach.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives30
- Confidence40
AI-linked hackers reached Korean bank customer data through staff and broker tools
Korea's Financial Services Commission ordered a sector-wide security review after suspected AI-agent hackers hit the country's five largest banks. The three biggest leaks ran through employee, sales and broker tools, so the review's cost lands on systems customers never see.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+25
- Incentives45
- Confidence55