Hackers Used AI Agents to Raid a Megachurch's Database, Exposing 850,000 Members

In brief

• Yoido Full Gospel Church in Seoul said Wednesday that data tied to 850,000 members may have been compromised, including names, birth dates and a log of changes to ID numbers, phone numbers and addresses.
• Security firm Oasis Security found the data on an overseas server alongside attack logs that referenced AI sub-agents and looked machine-generated, though AI's exact role is unclear.
• Sarang Church, a second Seoul megachurch, reportedly lost records on about 89,000 members and 286 employees, as South Korea also probes suspected AI-assisted hacks at banks including Shinhan.

Yoido Full Gospel Church, the Seoul megachurch Guinness once recognized as the largest congregation in the world, said Wednesday that personal data tied to 850,000 members may have been stolen.

The church's initial review found names and dates of birth, plus a log of changes members had made to their records. "The file contained 2,629 changes to resident registration numbers, 3,964 changes to phone numbers and 7,202 changes to addresses," the church said in a statement.

South Korea's internet security agency, KISA, flagged the suspected breach to the church on Tuesday afternoon. The church has since blocked outside access to its systems, changed its server passwords and begun notifying members.