South Korean banks' household loans grew 600 billion won in September, down from 3.5 trillion won in August, according to Bank of Korea data. Corporate loans rose 10.7 trillion won in the same month, so bank balance sheets grew anyway.
Perspective Coverage
3 publishers
- Builder
- Builder 5%
- Operator
- Operator 38%
- Investor
- Investor 57%
Reality
- Evidence70
- Adoption
- Not scored
- Hype gap+5
- Incentives
- Not scored
- Confidence72
KB Kookmin took 68 hours to detect its intrusion, against 15 at Shinhan
Singapore's cyber chief Gwenda Fong urged continuous monitoring a day after Korea's FSC found weaknesses at 130 of 555 inspected firms. Singapore's two-hour reporting clock starts only once an incident is known, so the hours before discovery are where monitoring works.
Reality
- Evidence55
- Adoption
- Not scored
- Hype gap−10
- Incentives40
- Confidence60
South Korea's Financial Services Commission said about 100,000 cases of personal data leaks are presumed across 16 financial institutions. The affected firms are still checking for further breaches, so the figure is an interim count.
Perspective Coverage
3 publishers
- Builder
- Builder 8%
- Operator
- Operator 72%
- Investor
- Investor 20%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence65
buildOne report1 publisher Dev.to post blames Korean bank breaches on missing agent controls, including no isolation and session-wide approval
A dev.to post says a Chinese-speaking attacker used Artex AI and Claude agents to breach Shinhan, KB Kookmin and Hana banks in October 2026. It proposes runtime guards on tool calls, yet the CrowdStrike finding it cites puts the agent sessions on the attacker's own infrastructure.
Reality
- Evidence22
- Adoption
- Not scored
- Hype gap+45
- Incentives
- Not scored
- Confidence30
Scaled for assets, US banks' cybersecurity staffing lead over Korea's big four drops from 47 times to under 5
Citibank and Bank of America each have about 3,400 dedicated cybersecurity staff, 34 to 47 times the headcount at Korea's four largest banks. Scaled for the 10-to-12-fold asset gap, the lead is 2.8 to 4.7 times on staff and 1.8 to 3.7 times on spending.
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+30
- Incentives
- Not scored
- Confidence55
Korea's $3 million cyberinsurance market is a tenth of one US ransomware payout
Korea's cyberinsurance market was worth $3 million in 2023, about a sixty-fifth of Japan's $196 million. AI-based attacks are now reaching banks such as KB Kookmin and Hana, yet most Korean companies still pay for breaches out of their own funds.
Reality
- Evidence55
- Adoption8
- Hype gap+10
- Incentives50
- Confidence50
Korea weighs size-tiered security rules that would ease network separation first for big banks
Korea is weighing bank security rules tiered by size, under which banks that earned 13.8 trillion won in six months would loosen network separation first. Savings banks, credit unions and community co-ops lost about 99.9 billion won between them, and for them the idea on the table is a pooled security service.
Reality
- Evidence55
- Adoption15
- Hype gap+25
- Incentives60
- Confidence50
President Lee Jae Myung says AI appears to have been used in hacks on South Korean banks that leaked data on at least 25,000 Shinhan customers. If his claim that AI removes the need for specialized skills holds up, banks should plan for many more attackers.
Perspective Coverage
18 publishers
- Builder
- Builder 32%
- Operator
- Operator 52%
- Investor
- Investor 16%
Reality
- Evidence70
- Adoption35
- Hype gap+20
- Incentives55
- Confidence64
South Korea's police added 15 specialists to the team investigating hacks of financial institutions, taking it from 28 to 43 investigators. Because the trail leads to attack servers abroad and the case could be handed to another agency, part of the probe's timing depends on people outside the police.
Perspective Coverage
3 publishers
- Builder
- Builder 25%
- Operator
- Operator 52%
- Investor
- Investor 23%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence64
CrowdStrike tied AI-assisted South Korean bank attacks, run on an open-source pentest tool and DeepSeek, to a possible 26-year-old suspect in Guangdong. The reported breaches involved systems banks run for brokers and staff, so the exposure to manage sits at the bank's edge, whoever the attacker proves to be.
Perspective Coverage
6 publishers
- Builder
- Builder 31%
- Operator
- Operator 52%
- Investor
- Investor 17%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+20
- Incentives40
- Confidence65
South Korea's FSC paused a plan to open bank network-separation exemptions to 75 firms after ARTEX-assisted hacks breached seven financial firms. The pause holds back at most 15 exemptions while regulators work out whether the attacker got in through the rule they were loosening or around it.
Perspective Coverage
8 publishers
- Builder
- Builder 38%
- Operator
- Operator 41%
- Investor
- Investor 21%
Reality
- Evidence62
- Adoption35
- Hype gap+30
- Incentives45
- Confidence60
Naver's $10 billion Sejong build tests whether Korean lenders will hold GPU risk
Naver and Brookfield are negotiating up to $9 billion of financing for a $10 billion expansion of Naver's Sejong AI data center to 200 megawatts. Korean banks weighing a share have to judge what about 100,000 Nvidia GPUs will be worth years into a loan.
Reality
- Evidence40
- Adoption
- Not scored
- Hype gap+10
- Incentives60
- Confidence45
President Lee Jae-myung ordered a full probe of hacks that exposed data at four Korean banks, including about 25,000 Shinhan Bank customers. The response runs through every financial industry association before the probe has shown whether the banks share a weak point.
Perspective Coverage
5 publishers
- Builder
- Builder 22%
- Operator
- Operator 59%
- Investor
- Investor 19%
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence60
President Lee Jae Myung ordered resources onto a breach of customer data at seven Korean financial firms, citing possible AI use in some attacks. What the firms pay will turn on a network law amended five days earlier and on which ministry runs the case.
Reality
- Evidence58
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence55
Hackers took data on 25,000 Shinhan customers through a site built for loan recruiters
South Korea's financial regulator gave lenders until Thursday to check every internet-facing system after hackers breached at least seven banks. Attackers entered through tools built for loan recruiters and staff, so the repair falls on how much credit data banks let outsiders see.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence55
Shinhan Bank exposed data on about 25,000 customers through a loan-broker inquiry platform kept apart from its core banking systems. Yonhap reports AI may have automated the credential stuffing, so the side systems that touch customer data are where lenders' security spending now gets tested.
Perspective Coverage
4 publishers
- Builder
- Builder 24%
- Operator
- Operator 49%
- Investor
- Investor 27%
Reality
- Evidence62
- Adoption
- Not scored
- Hype gap+25
- Incentives50
- Confidence60
Korea's National Police Agency booked the AI-driven attack on Shinhan Bank as a criminal case and assigned 28 cyberterrorism investigators to it. Whether the case moves to the new Serious Crimes Investigation Agency turns on how the Financial Services Commission classifies the bank's system.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence55
Customers of seven hacked Korean lenders start recruiting for class-action suits
Victims of breaches at seven Korean lenders, Shinhan Bank among them, are recruiting members for class-action damages suits. With suspects in earlier Korean data cases still uncaught, the lenders look like the only parties those suits can reach.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives30
- Confidence40
Korea's regulator widens its AI security exemption to about 15 more financial firms
Korea's Financial Services Commission is due on the 7th to name about 15 more financial firms exempt from network separation rules, after a first round of 10. Network separation rules are what stop lenders running AI security tools, so the list decides who can use AI against AI-driven hacking.
Reality
- Evidence45
- Adoption
- Not scored
- Hype gap+25
- Incentives60
- Confidence50
Korean regulators sent security orders to about 500 financial firms after the same attacker IP turned up in breaches at seven lenders. Almost every firm doing the emergency reviews has no reported breach, so the cost is shared across the sector.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+25
- Incentives
- Not scored
- Confidence58