Millions of personal records in Japan, South Korea exposed amid surge in AI-powered cyberattacks

The current wave of cyberattacks in Japan and South Korea is primarily financially motivated, with criminals deploying commercial AI models and penetration tools. These AI tools automate target discovery and accelerate breach execution, allowing attackers to systematically scan for vulnerabilities and exploit them at unprecedented speeds. This contrasts with traditional hacking methods that often required specialized skills, as AI now enables even amateur hackers to breach systems more easily.

A key vulnerability highlighted by these incidents is the reliance on third-party vendors and shared cloud infrastructure. Attackers are exploiting single points of failure within outsourced services, such as cloud computing and data center providers, to compromise numerous corporations simultaneously. This interconnectedness means that internal security measures alone are no longer sufficient to protect against sophisticated supply-chain intrusions.

The attacks manifest in two main forms: destructive ransomware, which has paralyzed services for hundreds of corporate and municipal clients, and unauthorized network intrusions aimed at siphoning private customer records. The scale of data theft is significant, with Japan reporting over 600 corporate cyberincidents by early October 2026, already exceeding the total for all of 2025. This increase demonstrates how AI amplifies the efficiency and reach of these attacks.