Kyowon ransomware attack affects about 600 servers
Kyowon was hit by a ransomware attack on January 10, 2026, affecting about 600 virtual servers and disrupting operations at its affiliates. Kyowon reported the attack to investigative authorities and began recovery procedures, and on January 12 it confirmed signs that data had been leaked externally. Excluding duplicate subscriptions, 5.54 million customers are at risk of having their information leaked, and whether the actually leaked data includes customer information is under investigation.
Key facts
- Affected organization
- Kyowon Group
- Incident type
- Ransomware
- Occurred / detected
- 2026-01-10
- Scale of damage
- About 600 virtual servers affected; 5.54 million customers at risk of information leak
- Cause / method
- Ransomware attack
- Location
- South Korea
Timeline
- About 600 virtual servers were affected by a ransomware attack.
- Signs of external data leakage were confirmed, and recovery procedures proceeded after the attack was reported to investigative authorities.
- Kyowon said that, excluding duplicate subscriptions, 5.54 million customers were at risk of an information leak and that whether actual customer information was included was under investigation.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.