Now Hacked
EN-GB
Ransomware

Ransomware attack on SGI Seoul Guarantee disrupts guarantee and loan services

First reported · Last reported · 24 related reports

In July 2025, SGI Seoul Guarantee was hit by a ransomware attack that paralysed its IT services and disrupted new jeonse loans and other services. The initial point of intrusion was identified as an SSL-VPN, and systems were restored from backups after 81 hours. The Gunra ransomware group claimed to have stolen 13.2TB of data, but this has not been confirmed; the company said there were no signs of a data leak and that it would fully compensate any financial losses.

Key facts

Affected organisation
SGI Seoul Guarantee
Incident type
Ransomware
Occurred / detected
Not confirmed
Scale of damage
IT services down for about 81 hours and disruption to guarantee and loan services
Cause / method
Intrusion via SSL-VPN and ransomware attack
Location
South Korea

Timeline

  1. The ransomware attack on SGI Seoul Guarantee disrupted loan services.
  2. As service outages continued, the company announced it would fully compensate affected customers.
  3. Systems were restored after 81 hours, and the initial point of intrusion was identified as an SSL-VPN.
  4. The Gunra ransomware group claimed to have stolen 13.2TB of data, but SGI Seoul Guarantee said there were no signs of a data leak.

24 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.