Korea extradites alleged hacking ringleader in cyberattack targeting BTS' Jungkook
Another high-ranking leader of a hacking syndicate that targeted wealthy individuals, including BTS member Jungkook, has been extradited from Thailand to South Korea, authorities said Tuesday.
South Korea’s Ministry of Justice announced that, in cooperation with the National Police Agency, it extradited a 40-year-old Chinese national on May 13 over his alleged role in operating an overseas hacking organization based in countries including Thailand.
According to the ministry, the group illegally accessed the websites of budget mobile phone operators and other platforms from August 2023 to April 2025. Using stolen personal information, the syndicate allegedly withdrew large sums of money from victims’ financial and virtual asset accounts without authorization.
Authorities said the victims included celebrities, conglomerate chairpersons, and venture company CEOs.
Among the confirmed victims was Jungkook. In January 2024, shortly after his military enlistment, his securities account was hacked, resulting in the theft of 33,500 shares of HYBE stock worth about 8.4 billion won ($5.6 million).
No financial losses were ultimately incurred after HYBE immediately suspended transactions and implemented emergency measures upon discovering the breach.
The ministry said the hacking group stole more than 38 billion won (about $25.27 million) from financial and cryptocurrency accounts belonging to wealthy and prominent individuals.
This marks the second extradition tied to the cybercrime case.
Last August, it extradited a man, 36, a Chinese national from Bangkok, Thailand to South Korea.
Authorities also secured custody of the newly extradited suspect during the same operation.
To facilitate the extradition, the ministry requested emergency extradition detention from Thai authorities in May 2025 before filing a formal extradition request in August 2025.
Following extradition proceedings and approval by Thai authorities, the suspect was transferred to South Korea.
The Ministry of Justice said prosecutors and investigators were dispatched to Thailand in July 2025 to coordinate with officials from the Thai Prosecutor General’s Office and the Thai National Police. Authorities from both countries also conducted frequent video conferences from October to December 2025 as part of ongoing cooperation in the case.