Episode Details

How did an attacker using ARTEX, an open-source agentic AI penetration-testing tool, take data on more than 67,000 customers from seven South Korean firms, including Shinhan, KB Kookmin and Hana, without touching core banking? The episode argues the failure was data access design. Broker portals and employee apps returned income, loan limits and resident registration numbers to callers who did not need them, despite nearly 124 billion won in security spending.

You come away knowing what the Financial Services Commission ordered, how CrowdStrike linked the attack to Claude Code and DeepSeek, and why basic cyber hygiene matters more than an AI defense product. You also get a concrete plan to inventory every externally reachable system that returns customer data and remove unneeded fields.

Key takeaways

• List every system reachable from outside your network that returns customer data, including partner portals and employee mobile apps.
• For each system, record the fields it returns and who outside the company can call it.
• Remove any field the caller does not need, starting with income, credit limits and national ID numbers.
• Make sure the data office is in the room when partner and broker APIs are specified, so a loan status is returned instead of a full customer profile.
• Have your red team run an agentic penetration-testing tool against partner portals before an outsider does.

Chapters
0:00 Shinhan breach through a loan broker portal
1:13 ARTEX agentic AI tool and the human attacker
2:38 Side-system data access as a CDO problem
4:42 FSC emergency order on exposed systems
6:06 Hygiene failure or AI-driven attack speed
8:16 Weekly task: audit customer data endpoints

Sources

• CrowdStrike: How a Cyber Attacker hit South Korean Banks
• AI-powered attacks on banks expose technological lag in Korea's financial cyber defenses - The Korea Times
• S. Korean regulators call emergency meeting after financial data breaches - UPI.com
• Financial authorities hold emergency meeting after data breaches at Shinhan Bank, KB Kookmin Bank - The Herald Business
• AI-linked hacks hit Korean banks through loan-agent sites

Full transcript: https://www.mba-training.com/en/podcast/data/artex-korea-bank-breaches-data-access

The article: https://www.mba-training.com/en/blog/artex-korea-bank-breaches-data-access

MBA Training, mba-training.com