BNK Busan Bank web server attack exposes data of 11 outsourced developers
BNK Busan Bank suffered an attack using AI agents against an external web server on 1 October 2026. A subsequent inspection confirmed that personal information belonging to 11 outsourced developers had been exposed on some web pages. BNK then carried out a comprehensive review of its information security response framework to prepare for increasingly sophisticated cyber-attacks.
Key facts
- Affected organisation
- BNK Busan Bank
- Incident type
- Data breach
- Occurred / detected
- 2026-10-01
- Scale of damage
- Personal information of 11 outsourced developers
- Cause / method
- An attack using AI agents against an external web server
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- BNK Busan Bank’s external web server was targeted in an attack using AI agents.
- The leak of personal information belonging to 11 outsourced developers became known.
- BNK’s comprehensive review of its information security response framework became known.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.