South Korean police have identified seven suspects in an alleged hacking operation involving ARTEX AI attacks against organisations across the country. Authorities believe the group breached more than 90 organisations and stole approximately 8.2 million records.
The suspected leader previously worked in penetration testing at a cybersecurity company between 2019 and 2022. According to police accounts reported by local media, he later adopted AI tools to expand the operation.
Former Penetration Tester Allegedly Led the Operation
Investigators describe the suspected leader as a 32-year-old self-taught hacker who began targeting organisations in September 2025. Initially, he allegedly relied on conventional hacking tools before introducing AI utilities in late August 2026.
Police say the operation used the ARTEX AI penetration testing framework in most of its attacks. The affected organisations reportedly included educational institutions, hospitals, major corporations and golf courses.
In 38 incidents, the suspect allegedly demanded ransom payments, promising not to publish stolen information. The report cites demands of 360 million won, approximately $270,000, but does not clearly establish whether that figure represents a combined total or an individual demand.
Meanwhile, the estimated 8.2 million stolen records do not necessarily represent 8.2 million different people. The available account does not provide a breakdown of the information involved.
ARTEX AI Attacks Prompted a Police Investigation
Police opened their investigation after a victim filed a complaint in June. Investigators subsequently examined server logs from compromised organisations to trace the suspects.
Authorities arrested the alleged leader on October 15, formally detained him two days later and referred him to prosecutors on October 23. Police also arrested six other suspects, although those individuals remain under investigation without detention.
Additionally, investigators reportedly used an internally developed AI tool to analyse recovered evidence. The case remains under investigation, and the reported allegations do not establish criminal convictions.
Police Warn About AI-Assisted Cybercrime
Authorities say generative AI can reduce the expertise necessary to conduct large-scale cyberattacks. Consequently, individuals may attempt operations that previously required more extensive technical knowledge or organised teams.
Police described the investigation as South Korea’s first arrest case involving large-scale hacking and personal information theft through generative AI misuse. However, that description concerns this specific category of case rather than every form of AI-related crime.
The ARTEX framework has also appeared in reporting about separate attacks against South Korean banks. Nevertheless, the available information does not establish a connection between those incidents and the seven suspects in this investigation.
Investigators Examine Possible Data Leaks
Police are continuing to investigate whether anyone published the stolen information on the dark web. So far, the supplied account does not confirm a public release or establish whether any victims paid ransom demands.
The ARTEX AI attacks therefore leave unresolved questions about the eventual use of the stolen records. Further investigation may clarify the extent of the exposure and each suspect’s alleged involvement.
0 responses to “ARTEX AI Attacks Linked to 8.2 Million Stolen Records”