An AI system found the holes, and a 7-person ring broke into about 90 companies
On October 27, 2026, South Korea's SBS reported that the Seoul Metropolitan Police Agency had arrested a seven-member hacking ring, including its alleged mastermind, identified as A. A had worked in security inspections at a security company and learned hacking from online blogs and similar sources. A has been referred to prosecutors in custody.
Police say that over about a year, starting in September last year, the group breached roughly 90 Korean companies, including private academies, hospitals and affiliates of large conglomerates, and stole 8.2 million personal records, including names, addresses and phone numbers.
The group used generative AI and an AI autonomous penetration system, the same kind reportedly used in recent attacks on the financial sector. Instead of people, the system searched for vulnerabilities on its own, hitting companies indiscriminately.
The group then emailed victims with the stolen data and threatened to expose the breaches, demanding a total of 360 million won in cryptocurrency from 38 companies. Police received a complaint from one victim in June and made the arrests four months later. They are still checking for more victims.
Source: press reporting of a Seoul Metropolitan Police Agency announcement. The investigation is ongoing.
Sources
Find this archive useful? Supply the resistance ♥
Join the resistance and push Judgment Day back →