Seven arrested for using generative AI to hack 90 organizations - Korea JoongAng Daily
South Korean police have arrested seven suspects, including a self-taught coder, for using generative AI to hack 90 organizations and steal 8.2 million records.
The Seoul Metropolitan Police Agency's cyber investigation division announced Monday that it had apprehended seven suspects on charges including violations of information protection laws and extortion. The arrests mark South Korea's first in a large-scale AI-assisted hacking case.
The ringleader, who did not major in information technology, had previously worked on penetration testing. Police believe he taught himself hacking techniques through online resources and began using generative AI extensively in August, which significantly expanded the scale of the operation.
They stole a total of 8.2 million records containing personal information and internal corporate documents.
Extortion Operation
After stealing the data, the suspects sent threatening emails to 38 of the affected organizations. They warned: "If you don't pay, we will leak the information. If the data breach becomes public, your company's reputation could suffer, and you could face regulatory fines and lawsuits from customers seeking compensation."
If you don't pay, we will leak the information. If the data breach becomes public, your company's reputation could suffer, and you could face regulatory fines and lawsuits from customers seeking compensation.
The group demanded a combined 360 million won ($272,000) in exchange for not disclosing the stolen information. An accomplice allegedly recruited additional participants through Telegram with messages offering simple phone call jobs that "takes just 30 seconds." Those recruited were tasked with contacting employees of targeted organizations to pressure them into paying.
Police Response
Investigators apprehended six suspects between July and September before arresting the alleged ringleader on October 15. The ringleader has been referred to prosecutors while investigations into the remaining six suspects continue.
Police reported they had recovered all stolen records containing personal information. Investigators used an internal AI-powered analysis system to quickly examine large volumes of evidence and logs from the affected organizations. The system helped police apprehend all seven suspects within four months of launching the investigation and prevent further damage.
"We will continue our investigation into the accomplices and work to identify additional victims," a police official said. "To respond to increasingly sophisticated AI-related crimes, we will actively expand the use of AI in police investigations."
Related
