About 8.2 million personal records stolen from 90+ Korean businesses. Three stories this week:

Seoul police arrests

Seoul police arrested 7 people who hacked about 90 businesses, including academies, clinics and golf courses. They used generative AI to expand attacks and demanded 360 million won from 38 firms. Police call it Korea's first such arrest.

Source: Seoul Metropolitan Police, Oct 26

Daishin Securities data leak

Daishin Securities: data on 38,490 customers, including names, emails, addresses and account numbers, leaked via an online account-opening server. It reported no signs of secondary damage. Bithumb also reported a data leak; Mirae Asset reported abnormal access.

Source: ZDNet Korea, Boannews, Oct 28

Apple security updates

Apple: iOS 18.7.11 / iPadOS 18.7.11 for iPhone XS, XS Max, XR and iPad (7th gen). CoreGraphics CVE-2026-86950 may have been used in targeted attacks. Source: Apple, Oct 26

This week's to-do

  • Use a unique password for each site
  • Check broker or exchange texts in the official app
  • iPhone: Settings > General > Software Update

Photo: Seoul Metropolitan Police Agency via Financial News