More than 8 million records were allegedly taken from 90 organizations in a cybercrime ring that law enforcement says used artificial intelligence to help carry out intrusions, according to the Seoul Metropolitan Police Agency.
Seoul Metropolitan Police Agency: arrests and allegations
South Korean investigators apprehended seven suspects in connection with what the Seoul Metropolitan Police Agency described as a coordinated cybercrime operation. The agency says the group carried out intrusions against 90 entities — businesses, hospitals and private academies among them — and that the activity dates “since September last year.” Authorities attribute the theft of more than 8 million records to the ring.
Scope of losses and the financial tally
Of the 90 alleged victims, the police identified 60 incidents in which the use of artificial intelligence is suspected. The group is accused of seeking extortion payments in some of those incidents; 38 targets reportedly sustained losses. Across the cases, the suspects demanded a total of 360 million won, which the source converts to approximately $272,000.
This site is the portfolio.
OSINTSights runs on Cloudflare Workers, D1, R2, and Vectorize, with an AI pipeline on Hetzner ARM. Nubivance designed, built, and operates it. We do the same for clients.
See what we buildAlleged use of AI and extortion tactics
The Seoul Metropolitan Police Agency’s account links AI to roughly two-thirds of the alleged victim set, but the report limits its description to saying the use of artificial intelligence is suspected in incidents affecting 60 victims. Some of those AI-linked incidents involved extortion demands, according to the police. Beyond that framing, the agency’s summary does not offer technical detail about the AI techniques or tools allegedly employed.
Leader’s background: from simulated attacks to alleged wrongdoing
Police allege the ring’s leader learned hacking skills while employed at a security company. At that company, the suspect was reportedly responsible for simulated hacking incidents — work that, according to the Seoul Metropolitan Police Agency, preceded the criminal activity now under investigation.
How South Korean authorities, affected organizations, and the financial sector are responding
- South Korean authorities: The Seoul Metropolitan Police Agency has made arrests and continues to investigate. The agency and broader law-enforcement community are described as remaining on alert for further cybercriminal activity.
- Affected organizations (businesses, hospitals, private academies): These groups are the named victims in the police statement; 38 of them are reported to have experienced losses, and some received extortion demands totaling 360 million won. The record count reported — more than 8 million records across the 90 entities — underscores the scale of exposure the police attribute to the ring.
- The financial sector: The police account emphasizes that South Korean authorities remain vigilant particularly after the nation’s financial sector “faced a series of high-profile, AI-driven cyberattacks,” a context that the agency cites in describing its heightened alert posture.
The Seoul Metropolitan Police Agency’s announcement ties together mass data exfiltration, alleged AI-assisted intrusions and targeted extortion demands, and it places the arrests against a backdrop of heightened concern following recent, AI‑linked incidents in the nation’s financial sector. The immediate facts the agency reported are stark: seven suspects detained, more than 8 million records claimed stolen, 90 victim organizations identified, suspected AI involvement in 60 incidents, and 360 million won sought in extortion.
What remains to be seen — and what the agency’s statement implicitly leaves open — is the precise role artificial intelligence played in the alleged operations, how the stolen records were used or distributed, and whether further arrests or recoveries will follow. For now, the Seoul Metropolitan Police Agency has made the arrests and has placed the matter in active investigation; the scale and alleged AI component make the case a focal point for South Korean authorities and affected organizations alike.