Samyang Group security incident history
Hacking, data breaches and other security incidents involving Samyang Group, with related coverage.
Hack at four Samyang Group companies exposes 149,767 people's personal information
149.8KImpact: Approximately 850,000 files totaling 1.3 TB containing 149,767 people's personal information were leaked, including the resident registration numbers of 82,750 people
In July 2022, approximately 850,000 files totaling 1.3 TB and containing the personal information of 149,767 employees, shareholders, and other associated individuals were leaked from four Samyang Group companies. The attacker exploited a mail server vulnerability to gain administrator privileges, stole file server credentials, and exfiltrated data, which included the resident registration numbers of 82,750 people. The Personal Information Protection Commission (PIPC) found that a server no longer in use had been left connected to an external network and that resident registration numbers had been inadequately encrypted, among other shortcomings, and approved sanctions including an administrative fine of KRW 552 million; Samyang Group said it had strengthened its security systems after the incident.
Related reports: 23 · last report →