AI just made your bank's database cheaper to rob.

AI just made your bank’s database cheaper to rob.

A threat actor used ARTEX, a Chinese open-source AI pen-testing tool running on DeepSeek v4.1-flash, along with Claude Code sessions on GLM-5.3 and Grok 4.6, to breach at least nine South Korean banks. More than 68,000 people had their personal financial data stolen.

At Shinhan Bank alone, loan-application data for 25,000 customers was taken: names, phone numbers, annual incomes, loan limits, and for 66 of them, national ID numbers.

The attacker wasn’t sophisticated. CrowdStrike found open directories the actor left exposed on their own infrastructure, stuffed with Claude Code session histories and Chinese-language pentesting instructions. They asked Claude how to find Korean Telegram groups that buy breach data, then asked it to write them a security-researcher résumé.

CrowdStrike assesses with moderate confidence the actor is a Chinese speaker and financially motivated but hasn’t established who was behind it.

Nobody cracked any encryption. They just had AI try random values on a loan-status page until one opened. Tedious grunt work you hand off to a machine.

South Korea’s president said it plainly: “We have now reached a point where AI can make hacking easy for even those without special skills.”

These databases are honeypots. Nothing shows a KYC rule caused this specific breach, but KYC/AML policies push companies to collect and hoard exactly the kind of data that got stolen. The cost of raiding these targets is collapsing. The cost of defending them isn’t.

Hold your own keys. Hand over as little of yourself as possible. End KYC/AML.

High signal Bitcoin, privacy, and AI news. No filler.

Sign up for The Commoner: https://tftc.io/commoner