SGI Seoul Guarantee Insurance Ransomware Attack Infects DB Servers, Halts Guarantee Issuance
In July 2025, SGI Seoul Guarantee Insurance was hit by a ransomware attack that infected 41 major DB servers and halted operations such as guarantee issuance. Core IT systems were restored within three days, and security reinforcement measures, including restoration of the internal business support system, were completed in January 2026. As of October 30, 2026, no sanctions by financial authorities had been finalized.
Key facts
- Affected organization
- SGI Seoul Guarantee
- Incident type
- Ransomware
- Occurred / detected
- Not confirmed
- Scale of damage
- 41 major DB servers infected; operations such as guarantee issuance halted
- Cause / method
- Ransomware attack
- Location
- South Korea
Timeline
- It was confirmed that, after the July 2025 ransomware incident, restoration of core IT systems and the internal business support system had been completed, while sanctions by financial authorities remained undecided.
1 related reports
Other incidents at SGI Seoul Guarantee
Ransomware attack on SGI Seoul Guarantee disrupts guarantee and loan services
Impact: IT services down for about 81 hours and disruption to guarantee and loan services
In July 2025, SGI Seoul Guarantee was hit by a ransomware attack that paralyzed its IT services and disrupted new jeonse loans and other services. The initial point of intrusion was identified as an SSL-VPN, and systems were restored from backups after 81 hours. The Gunra ransomware group claimed to have stolen 13.2TB of data, but this has not been confirmed; the company said there were no signs of a data leak and that it would fully compensate any financial losses.
Related reports: 24 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.