According to United Daily News, a 38-year-old man surnamed Lin in Kaohsiung used AI to write scripts to illegally breach the website backends of government agencies and private enterprises, stealing over 230,000 personal data records of citizens and selling them on the dark web [1]. The report noted that victim organizations included a publishing house, a senior social welfare organization, and two government agencies, with police estimating his illicit profits at approximately NT$2.7 million [1]. Lin was referred to prosecutors on suspicion of offenses against computer security and released on NT$30,000 bail, while police have asked the breached organizations to patch their software vulnerabilities [1].
Kaohsiung Man Arrested for Using AI-Written Scripts to Breach Website Backends and Sell Over 230,000 Personal Data Records on the Dark Web
1 min read
- Disclosed
- Nov 7, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 8, 2026
- Scale
- 230,000 records[1]
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government, Media, entertainment & gaming
What to do nowOur advice
Lin was referred to prosecutors on suspicion of offenses against computer security and released on NT$30,000 bail, while police have asked the breached organizations to patch their software vulnerabilities [1].
Timeline
- Media reports Kaohsiung police arrested suspect who used AI to breach websites and sell personal data[1]
Technical details
What Happened
According to United Daily News, the Tech Crime Investigation Team of the Kaohsiung City Police Department's Criminal Investigation Corps discovered during cyber patrols that personal data of individuals from Taiwan, Hong Kong, and Thailand was being sold on the dark web, and identified a suspect surnamed Lin after cross-referencing clues [1].
The report stated that Lin used generative AI to learn programming and web setup, conducting opportunistic probing to breach website backends and steal member and customer personal data from databases, totaling over 230,000 records [1].
Scope of Impact
According to the report, Lin allegedly breached a publishing house, a senior social welfare organization, and two government agencies; citing investigative confidentiality, prosecutors and police did not disclose the names of the affected government agencies [1].
Response and Remediation
Lin was referred to the Kaohsiung District Prosecutors Office on suspicion of offenses against computer security, where prosecutors determined detention was unnecessary and released him on NT$30,000 bail [1].
References
Media1
- [1]
“高雄卅八歲林姓男子透過AI撰寫程式,非法駭入公家機關及私人企業網站後台,竊取廿三萬餘筆民眾個資,透過暗網販售。”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.