Seoul police have arrested seven individuals involved in a large-scale hacking campaign that utilized generative AI to compromise approximately 90 organizations. The operation resulted in the theft of 8.2 million records, including personal data from hospitals, universities, and private educational institutions. One funeral services provider alone reported the loss of 1.22 million records.
The alleged leader of the group is a 32-year-old individual who reportedly taught himself hacking techniques online. According to investigators, the suspect utilized an AI coding agent and an autonomous penetration-testing tool known as Artex. Between August 31 and October 13, the suspect successfully breached 60 companies in just 44 days, a feat police noted would previously have required an entire hacking group.
The criminal campaign spanned 13 months, from September 2025 until October 2026. Authorities initiated the investigation in June following a formal complaint from a victim. While 15 organizations have officially reported damages, police are continuing their efforts to identify additional victims and investigate the six accomplices involved in the operation.
The primary suspect currently faces charges under South Korea's information and communications network law, as well as counts of extortion and attempted extortion. The case marks the first instance in South Korea where suspects have been apprehended for a large-scale hacking operation specifically assisted by artificial intelligence tools.
