Haesung DS VPN intrusion leaks personal data of 73,975 people
In October 2023, an intrusion exploiting an SSL-VPN vulnerability at Haesung DS leaked the personal information of 73,975 shareholders, employees and partner company staff, and infected an internal file server with ransomware. The company was found to have neglected security updates and anti-malware measures, and in July 2025 it was fined 343 million won.
Key facts
- Affected organisation
- Haesung DS
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of 73,975 shareholders, employees and partner company staff leaked, and internal file server infected with ransomware
- Cause / method
- Intrusion exploiting an inadequately updated SSL-VPN vulnerability
- Location
- South Korea
Timeline
- The findings of the investigation into the October 2023 personal data leak and ransomware infection were published, and Haesung DS was fined 343 million won.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.