Seoul police have arrested seven individuals in South Korea's first large-scale AI-assisted hacking case, involving breaches of 90 organizations and 8.2 million stolen records.
Police Crack Down on AI-Assisted Cybercrime
In a significant breakthrough, Seoul police have apprehended seven individuals involved in a large-scale hacking operation that utilized generative AI technology. The group is accused of infiltrating around 90 organizations and compromising 8.2 million records, marking South Korea's first major AI-assisted hacking arrests.
The operation, which targeted a range of institutions including hospitals, universities, and even golf courses, reportedly began in September 2025 and spanned approximately 13 months. The alleged mastermind, a 32-year-old self-taught hacker, integrated AI tools into his hacking techniques, breaching 60 companies in just 44 days. His methods included employing an AI coding agent and an autonomous penetration-testing tool.
According to police, the ringleader, who lacks formal IT training, claimed to have honed his skills through online resources. He initially used basic website vulnerability scanners before advancing to more sophisticated AI-based tools, which enabled him to automate hacking processes typically handled by teams of professionals.
The group sent ransom demands totaling 360 million won (approximately $272,000) to 38 victims, although only a minimal payment of 300,000 won (around $210) was confirmed. The investigation was initiated following a complaint from one of the victims, and authorities continue to probe the involvement of the six accomplices while seeking additional victims.
Growing Concerns Over AI in Cybercrime
This incident highlights the evolving landscape of cybercrime, where AI technologies are increasingly being exploited. Past reports have indicated that AI tools have been used in various criminal activities, including phishing scams and extortion campaigns. The case also raises awareness about the potential risks associated with AI as it becomes more accessible to individuals with limited technical skills.
The ringleader has been charged under South Korea's information and communications network law, alongside charges of extortion and attempted extortion. Authorities are committed to further investigations as the implications of this case unfold.
