South Korean police arrested a seven-person cybercrime ring led by a 32-year-old self-taught hacker for allegedly using generative AI tools and automated vulnerability scanning to breach roughly 90 organizations and steal 8.2 million personal records.
According to the Seoul Metropolitan Police Agency, the alleged cyberattacks took place between September last year and October this year. The main suspect, identified as A, reportedly carried out the hacking, while an accomplice helped prepare email accounts and recruit others to send extortion messages to the affected companies.
The group allegedly threatened to publicly disclose the stolen information, warning companies that the leaks could damage their reputations and lead to government penalties.
Investigators found that the main suspect was not an IT graduate but had taught himself hacking techniques through online blogs. He had also worked at a security company between 2019 and 2022, conducting simulated hacking exercises. Police said he later expanded his attacks using generative AI, with around 60 companies reportedly targeted through AI-assisted methods.
Authorities said the suspect demanded a total of 360 million South Korean won from 38 companies. However, only one small business was confirmed to have paid, transferring 300,000 won before the suspects were apprehended.
The stolen information reportedly included names, resident registration numbers, phone numbers, addresses, employee details and internal business documents. Police said there was no evidence that credit card information had been leaked or that the stolen data had circulated on the dark web.
The main suspect was referred to prosecutors under detention, while the other six suspects remain under investigation without detention.
Police are continuing to identify additional victims, investigate possible accomplices and trace criminal proceeds. Companies receiving similar extortion threats have been urged to report them immediately.
Also Read: California Man Charged with Smuggling $300M Worth of Export-Controlled Servers to China






