Reported theft of $18M from Standard Bank that caused a malfunction of the system shortly before the cash was · May 2016
Annex 21: Suspected DPRK cyber-attacks on financial institutions (including banks and cryptocurrency exchanges) investigated by the Panel. A. Banks. Reported theft of $18M from Standard Bank that caused a malfunction of the system shortly before the cash was withdrawn from ATM machines at convenience stores in Tokyo and 16 prefectures across Japan with forged cards made with data stolen from credit cards issued by the bank. A reply from the Government of Japan to the Panel dated 25 July 2019 stated, "As of 9 July 2019, approximately 260 suspects, including organized crime group members, have been arrested, and the total amount of the cash illegally withdrawn from the ATMs across Japan was approximately 1.86 billion yen. ..."
Illegal ATM withdrawals in Japan using hacked credentials from a South African bank · 2016
Para 127: “... further notes that the suspected ringleader of a 2016 scheme involving illegal ATM withdrawals using hacked credentials from a South African bank fled from Japan to the Democratic People’s Republic of Korea immediately after the attack. The reply of Japan is contained in annex 66.” Annex 66, Japan’s reply: “there is no confirmed information as of 29 January 2021 that indicates connection between the suspects arrested with the case ... and North Korea, including their contacts with any North Korean individuals/entities.”