Hyundai Capital Hit By AI Scraping Attack Exposing 146 Loan Agents

Hyundai Capital confirmed a data breach on October 3, 2026, after hackers targeted an external webpage used to verify its housing-loan agents. The AI-assisted query attack exposed highly regulated 13-digit resident registration numbers, emails, and phone numbers for a subset of 146 independent brokers. The attackers utilized automated tools from an overseas IP address to rapidly scrape the public directory without triggering standard signature-based defenses. Core banking infrastructure held up because the compromised lookup tool was strictly segmented from the main loan-origination systems containing general customer records. The breach lands just weeks after South Korea’s National Assembly enacted PIPA amendments capping administrative privacy fines at 10% of total company revenue. "There was no leakage of general customer personal information, and there was no access to or attack on our internal systems." — Hyundai Capital