South Korean megachurches probe suspected AI-linked cyberattacks

Two South Korean megachurches are investigating suspected cyberattacks that may have exposed the personal data of hundreds of thousands of congregants, with evidence suggesting AI tools may have been used in the attacks, according to the churches and a cybersecurity firm.

Here are some details:

• Cybersecurity company Oasis Security found data, attack records and account information on an overseas server that contained information linked to Seoul's Yoido Full Gospel Church and Sarang Church.
• Records of the alleged attacks included signs that AI tools were used during the intrusion, such as references to "sub-agents" and extensive attack reports that appeared automated, Oasis Security said.
• Yoido Full Gospel Church said on Wednesday that initial analysis indicated data relating to 850,000 members may have been compromised.
• The data included names and dates of birth, with a smaller number of records containing changes to national identification numbers, addresses and telephone numbers.
• The church said it was notifying affected members, blocking external access and changing server passwords.
• Sarang Church, in Seoul's Seocho district, said it had formed an emergency task force, reported the suspected incident to relevant authorities and was taking steps to determine what happened and prevent further harm.
• The news follows hacking attacks against South Korean commercial banks that led to a breach of customers' personal information. South Korean President Lee Jae Myung said on Tuesday that AI was believed to have been used in the cyberattacks.