Reporting on Seoul police’s announcement describes suspects accused of stealing about 8.2 million personal and internal records from roughly 90 organizations. Initial charges cover approximately 900,000 records at 15 reporting organizations. The principal suspect was not an IT major but had penetration-testing work experience, and investigators say AI use expanded the attack scope. This should not be reduced to an unskilled person performing every attack with AI alone. Organizations should review known vulnerabilities, exposed entry points, access logs and breach notices.