South Korean financial authorities confirmed that one internet protocol address appeared in breaches at seven companies: Shinhan Bank, KB Kookmin Bank, Hana Bank, BNK Busan Bank, Yegaram Savings Bank, Welcome Savings Bank and Hyundai Capital. Investigators said attackers appeared to rotate addresses and may have used artificial intelligence tools to automate attacks at scale. Shinhan Bank materials submitted to the National Assembly showed addresses linked to Korea, the U.S., Japan, Hong Kong, Singapore, Vietnam, Thailand and the U.K. Information was exposed from auxiliary systems used by employees and loan brokers, but internet and mobile banking were not affected and no financial losses have been reported. Regulators grouped the incidents into three categories, distributed indicators and security guidance to about 500 financial companies, and ordered firms to repair authentication and access-control weaknesses or disable affected services. Banks and card companies must complete emergency reviews by the 6th, while securities firms, insurers, savings banks and electronic financial service providers have until the 8th. Authorities are also preparing a broader security framework for AI-driven intrusions.