Insights2026.10.26
AI agent hacks hit several Korean financial firms, but the breached systems were loan-broker and staff tools, not banking apps
US security firm CrowdStrike analyzed AI work logs left on an attacker's server. The attacker ran a free open-source tool on other companies' commercial AI models and tried to break into many financial firms at once. What got breached were not banking apps but work systems for loan brokers and staff with weak identity checks. Korea's Financial Services Commission told firms to review systems by whether they are open to the outside, not by whether customers use them.
