Now Hacked
EN-GB
Ransomware

Golfzon ransomware attack exposes personal data of about 2.21 million people

First reported · Last reported · 18 related reports

On 23 November 2023, Golfzon suffered a ransomware attack that damaged part of its server disks, disrupting its app, web and reservation services. It completed emergency recovery after replacing the servers, but later confirmed that files containing members' personal information had been leaked and apologised. An investigation confirmed that access to a file server through a stolen VPN account led to the exposure of personal information of about 2.21 million users and employees.

Key facts

Affected organisation
Golfzon
Incident type
Ransomware
Occurred / detected
2023-11-23
Scale of damage
Personal information of about 2.21 million users and employees, including resident registration numbers of 5,831 people and account numbers of 1,647 people
Cause / method
Ransomware attack that accessed a file server using a stolen VPN account
Location
South Korea

If your data was exposed

Exposed dataNational ID numberBank account

  1. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  2. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. A ransomware attack damaged part of the server disks and disrupted app, web and reservation services.
  2. Golfzon completed emergency recovery after replacing the servers and said no personal information had been leaked.
  3. Golfzon issued a notice of the personal data leak and an apology.
  4. A penalty surcharge of 7.504 billion won and a fine of 5.4 million won were imposed over the leak of personal information of about 2.21 million people and poor management.
  5. It was reported that Golfzon had brought an administrative lawsuit challenging the penalty surcharge.
  6. Collective action, including consumer damages claims, gathered pace.

18 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.