South Korea’s financial sector has recently experienced a new series of cyberattacks targeting prominent institutions such as Daishin Securities, Mirae Asset Global Investments, and the crypto exchange Bithumb. The latest wave follows closely on the heels of attacks last month, raising alarms over the increasing threat of AI-enhanced hacking tools in Asia. Notably, in the September attacks, cybersecurity experts identified the involvement of a suspected China-based hacker leveraging an AI penetration testing software called Artex, though investigations into the current incidents are still ongoing.

Daishin Securities confirmed that approximately 38,490 customers had their personal information compromised, including names, email addresses, and phone numbers, prompting the company to alert those affected and work with authorities to investigate the breach. Both Mirae Asset and Bithumb also disclosed cybersecurity incidents, but have not verified any customer data loss to date. These breaches have led South Korea’s Financial Services Commission to urge financial institutions to bolster cyber defenses and to initiate extensive security reviews of IT systems across the private sector.

The situation is heightened by a parallel cybersecurity event in Japan involving GMO Internet, a major IT and internet services firm. GMO reported unauthorized access to its Onamae cloud desktop service, used by financial traders, and suspects that stolen customer data was posted online by hackers. GMO responded by shutting down the affected service, reporting the breach to law enforcement, and offering compensation and alternative services to clients. The Japanese Financial Service Agency has also emphasized enhanced cybersecurity preparedness, especially in light of vulnerabilities exposed by AI-based tools like Artex, which has since been taken offline by its Chinese developers.

Together, these incidents underscore growing cybersecurity challenges throughout the Asian financial industry, particularly as adversaries exploit gaps in defenses such as insufficient multi-factor authentication. Regulators in both South Korea and Japan are pushing for stronger security frameworks and the adoption of advanced AI and cybersecurity technologies to combat emerging threats. With investigations underway, the full implications of these breaches remain to be seen, but the wave of attacks clearly signals a rising need for vigilance and robust protective measures in the region’s critical financial infrastructure.