A 40-year-old Chinese national suspected of leading a hacking ring was extradited from Bangkok to South Korea on May 13, 2026, authorities confirmed [1, 2]. The suspect faces charges for allegedly stealing more than 38 billion won (approximately 32 million Singapore dollars or 25 million US dollars) from victims' bank and cryptocurrency accounts [1, 2].
The hacking group operated between August 2023 and April 2025, targeting websites including budget mobile carriers, government-linked services, and corporate portals [1, 2]. Confirmed victims include BTS member Jungkook, a conglomerate chairman, and a start-up executive [1, 2]. Jungkook had his securities account identity stolen and shares worth 8.4 billion won (approximately 5.6 million US dollars) taken, but avoided financial loss due to an immediate payment suspension on his account [2].
South Korean prosecutors and investigators were dispatched to Thailand in July 2025 to coordinate with Thai officials on the extradition process [1, 2]. The Justice Ministry and National Police Agency worked through Interpol in Thailand to secure the arrest of the suspect as well as an accomplice [1].
The accomplice, a 36-year-old Chinese man arrested in Thailand in May 2025, was extradited to South Korea in August 2025, indicted in September, and is currently on trial [1, 2].
The Justice Ministry issued a statement, saying, "We will continue to work closely with relevant agencies, including the National Police Agency and the Foreign Ministry, to track down and sternly respond to transnational crimes that threaten public safety, including hacking and online fraud" [1].
The South Korean authorities' efforts to bring the main suspect to justice follow months of diplomatic and investigative coordination with Thai counterparts. The suspect's extradition on May 13 marks a key step as the investigation and trial phase continue.
