South Korea's Cybersecurity Breaches Surge 26% in 2025 Amid AI Threats

Cybersecurity breaches in South Korea increased by 26% in 2025, totaling 2,383 incidents. Server intrusions made up the largest share of attacks, followed by DDoS and ransomware incidents. The government report warns that AI is enabling more advanced and automated hacking tactics, with deepfake-based attacks predicted for 2026. Authorities are investigating a major breach at Kyowon Group that may have affected millions of accounts.

Key Points: South Korea Cyberattacks Up 26% in 2025, AI Threats Grow

  • 26% annual rise in breaches
  • Server intrusions are top attack vector
  • AI automation fuels advanced tactics
  • Deepfakes predicted for 2026 attacks
2 min read

Cybersecurity breaches up 26 pc in S. Korea in 2025 amid AI-based threats

South Korea reports a 26% rise in cybersecurity breaches for 2025, driven by AI-based hacking tactics targeting servers, finance, and education.

Cybersecurity breaches up 26 pc in S. Korea in 2025 amid AI-based threats
"Hacking tactics are becoming more advanced through AI-based automation and coordinated attacks. - Ministry of Science and ICT"

Seoul, Jan 27

The number of cybersecurity breaches reported to authorities rose 26 per cent from a year earlier in 2025, a government report here showed on Tuesday, as hackers continue to develop their attack tactics based on artificial intelligence technologies.

The total number of cybersecurity breaches came to 2,383 in 2025, compared with 1,887 tallied a year earlier, according to the report by the Ministry of Science and ICT, reports Yonhap news agency.

Of the cases, server intrusions accounted for 44.2 per cent, followed by distributed denial-of-service (DDoS) attacks at 24.7 per cent.

Cybersecurity breaches involving malicious code, including ransomware, accounted for 14.9 per cent of the reported intrusions, the science ministry said.

In 2025, South Korea experienced a series of cyberattacks on platforms closely connected to people's daily lives, including mobile networks and financial services, it noted.

"The scope of hackers' targets has expanded to the education and medical sectors, beyond previous targets that included research, manufacturing and energy institutions," the science ministry said in the report.

"Hacking tactics are becoming more advanced through AI-based automation and coordinated attacks," it added.

In 2026, hackers may even seek to infiltrate "trust-based communication methods," such as real-time voice calls for virtual meetings, using deepfake technology that generates voices and videos, according to the ministry.

They may also directly target existing AI models, the ministry said.

"Attackers may inject malicious information into chatbots, analysis programs or security platforms to cause malfunctions or information leaks," it said, calling on businesses to enhance their security readiness.

"The government will operate AI-based prevention and response programs and take preemptive actions to address security blind spots to create a reliable cyber environment.

Meanwhile, South Korean cybersecurity authorities estimate that around 9.6 million accounts may have been affected by a recent cyberattack at Kyowon Group, a local education service provider.

The estimate by a government investigation team that includes the Korea Internet and Security Agency comes after Kyowon Group reported a possible breach this month, saying it had detected traces of a ransomware attack.

- IANS

Share this article:

Reader Comments

P
Priya S
Deepfake voice calls for virtual meetings? That's terrifying! So many Indian companies and government offices use Zoom and Teams now. How will we know if the person we're talking to is real? 😨 We need regulations and public awareness campaigns about this new threat.
V
Vikram M
The focus on education and medical sectors is alarming. Imagine if a major Indian ed-tech platform like Byju's or a hospital chain like Apollo gets hit. Patient data and student records could be held ransom. Our CERT-In needs to issue specific guidelines for these sectors immediately.
S
Sarah B
While the article is about South Korea, it highlights a global problem. I work in IT security in Bangalore, and the sophistication of phishing attempts has skyrocketed. They're now personalized using AI, making them very hard to spot. Continuous employee training is no longer optional.
R
Rohit P
Respectfully, I think our government's approach is too reactive. We celebrate "Digital India" but are we building it securely by design? The 9.6 million accounts breached in that education hack is a huge number. We must mandate stronger data protection laws and penalties for lax security.
K
Kavya N
My father's small business got hit by ransomware last year. It was a nightmare. If AI is making these attacks more common and automated, then lakhs of Indian SMEs are sitting ducks. We need affordable, simple cybersecurity solutions for the common business owner.

We welcome thoughtful discussions from our readers. Please keep comments respectful and on-topic.

Leave a Comment

Minimum 50 characters 0/50