Simmtech ransomware attack encrypts some production systems and data
Simmtech said that some of its production systems and data were encrypted in a ransomware attack on 9 November 2024, and that it recovered within two to three days. In December, the ransomware group Underground claimed to have stolen about 745GB of internal data and released items including the chairman's passport photo and tax-related documents.
Key facts
- Affected organisation
- Simmtech
- Incident type
- Ransomware
- Occurred / detected
- 2024-11-09
- Scale of damage
- Some production systems and data encrypted; attackers claim to have stolen about 745GB of internal data
- Cause / method
- Ransomware attack
- Location
- South Korea
If your data was exposed
Exposed dataID document copy
- Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Some of Simmtech's production systems and data were encrypted in a ransomware attack.
- The company said it had no knowledge regarding the alleged Simmtech hack.
- Simmtech said it recovered two to three days after the attack, and Underground's claim of data theft and its release of items such as a passport photo were reported.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.