In a significant development for one of the most high-profile cybercrime cases in recent years, the South Korean Ministry of Justice and the National Police Agency announced on May 13, 2026, that the Chinese mastermind behind a massive hacking ring has been successfully extradited from Thailand to South Korea.
The 40-year-old suspect, identified as “A,” arrived at Incheon International Airport earlier this morning to face charges involving the theft of over 38 billion won (approximately $25.4 million) from various high-net-worth individuals, including BTS member Jungkook.
The extradition marks a major win for international law enforcement coordination.
An official from the Justice Ministry emphasized the gravity of the case, stating,
“We have successfully extradited the mastermind of the hacking group that stole over 38 billion won from financial and virtual asset accounts, and we plan to seek a formal arrest warrant immediately to proceed with the investigation.”
This follow-up comes after the group’s secondary leader was already repatriated in August 2025, effectively dismantling the core leadership of the criminal organization.
Identity Theft and the Targeting of High-Profile Assets
The hacking organization’s operation was sophisticated and predatory, specifically targeting individuals whose ability to monitor their financial accounts was compromised- such as corporate executives in custody or celebrities serving in the military.
Jungkook became a primary target in early 2024 while he was fulfilling his mandatory military service.
The group used illegally obtained personal information to open unauthorized brokerage accounts and attempted to siphon off 33,500 HYBE shares, valued at approximately 8.4 billion won at the time of the crime.
Fortunately, the swift intervention of HYBE’s subsidiary, Big Hit Music, prevented a total financial catastrophe.
A representative from the agency previously clarified the situation, saying,
“The company and artist immediately implemented payment suspension and restoration measures upon detecting the crime, preventing actual damage.”
While the shares were briefly moved to an unauthorized account, the prompt legal and technical response ensured that Jungkook did not suffer a permanent loss of his assets.
The case also involved a civil lawsuit filed in March 2024, in which the Seoul Western District Court eventually ruled in Jungkook’s favor, ordering the full return of the disputed stocks.
Global Coordination and Strengthened Artist Protection
The arrest and extradition of “A” were the result of a year-long joint operation between the Seoul Metropolitan Police Agency, the Justice Ministry, and Interpol.
The hacking ring reportedly gained access to victims’ data by breaching the websites of various government agencies and budget mobile carriers between 2023 and 2025.
By creating “proxy phones” using stolen resident registration numbers, they were able to bypass security protocols for bank and cryptocurrency accounts.
In the wake of this breach, Big Hit Music has significantly overhauled its security protocols.
The agency noted that,
“Separately from legal actions, we have strengthened security measures for artists’ personal and device information to prevent recurrence.”
As Jungkook prepares to complete his military service in June 2025, this legal resolution provides a sense of closure to a stressful chapter.
The prosecution now plans to analyze seized evidence to determine if there were additional victims or hidden assets, ensuring that all members of the transnational crime ring are held accountable for threatening public and personal financial safety.
