Signs of employee data breach in SK Innovation internal system
In mid-August 2026, SK Innovation detected signs of abnormal external access to employee information in an internal business system. The data accessed is presumed to include names, departments, titles, contact details and internal email addresses, and whether it was actually leaked and the extent of the impact are under investigation. The company reported the matter to the relevant authorities and took security measures, and no secondary damage had been confirmed as of 2 September.
Key facts
- Affected organisation
- SK Innovation
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Abnormal external access to an internal business system
- Location
- South Korea
If your data was exposed
Exposed dataNamePhone numberEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- SK Innovation said it detected signs of abnormal external access in mid-August, reported it to the relevant authorities and took security measures.
- It became known that no secondary damage had been found so far in connection with the signs of a hack at SK Innovation.
7 related reports
Other incidents at SK Innovation
SK Innovation E&S belatedly reports server hack
Impact: Hack of about 15GB of server data
In April 2026 it emerged that SK Innovation E&S had belatedly reported a hacking incident that occurred about four years earlier. The hack hit 15GB of data on an SK E&S server directly managed by SK C&C, and allegations were raised that the incident was concealed for 40 months.
Related reports: 3 · last report →SK Innovation E&S reports hacking incident four years later
SK Innovation E&S reported a hacking incident to the Korea Internet & Security Agency (KISA) about four years after it occurred. The company explained that it had been unaware of its reporting obligation and said it could not confirm whether data had been leaked, even though a leak was presumed. Allegations later emerged that an employee died while responding to the hack and that the company had denied the hacking.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.