SOCAR internal systems breach exposes staff and partner personal data
An attacker used stolen credentials to access SOCAR's internal management system and exfiltrate personal information belonging to some current and former employees and partner company personnel. The exposed data included names, work email addresses and mobile phone numbers, along with bank account numbers and some encrypted card numbers belonging to partner company personnel. The number of people affected was not disclosed.
Key facts
- Affected organisation
- SOCAR
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal and financial information belonging to some current and former employees and partner company personnel
- Cause / method
- Unauthorised access to the internal management system using stolen internal credentials
- Location
- South Korea
If your data was exposed
Exposed dataNameEmailPhone numberBank accountCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
- Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- It emerged that a breach of SOCAR's internal systems had exposed personal and financial information belonging to some employees and partner company personnel.
- Further reports followed on the exposure of personal and financial information belonging to SOCAR employees and partner company personnel.
4 related reports
Other incidents at SOCAR
Socar Detects and Blocks Attack After Personal Data of 248 Customers Leaks
248Impact: Personal data of 248 customers
Personal data of 248 Socar customers was leaked. An attack similar to the one used against Musinsa's 29CM was used, and Socar detected and blocked it within 10 minutes, preventing further damage.
Related reports: 2 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.