ENKR

Samyang Group file server breach, staff and shareholder data leak

Add to my breach check

Made public · 149,767 people

What leaked2

Hard to replace

  • Other profile data

Permanent

  • Resident registration number
  • Resident registration number82,750 people; not encrypted
  • Other profile datastaff, shareholder and related-person data in about 850,000 files · 1.3 TB

To-dos

None of the harms this check covers.

Company
Samyang Group
When it happened
–
Made public
Notice
Leak confirmed
Affected
149,767 people: staff, shareholders and other people related to Samyang Holdings, Samyang Corp. and Samyang Packaging; 82,750 of them with resident registration numbers · PIPC decision

How the facts developed

  1. PIPC decision: in July 2022 an attacker used a mail server flaw, took the credentials of a file server left connected to outside networks after a data migration, and copied about 850,000 files to an outside cloud

Outcome

PIPC November 11, 2026: penalty surcharges of KRW 552 million in total (KRW 184 million each to Samyang Holdings, Samyang Corp. and Samyang Packaging), administrative fines of KRW 16.2 million in total, and a corrective order to the processor Samyang Data System.

Sources