Kyowon Group external data leak affecting customer data
Data Leak
Summary
Hide ▲
Show ▼
Kyowon Group confirmed an external data leak tied to its January 2026 ransomware incident, creating a real risk that customer information was exposed. The company said it is investigating with authorities and security experts to determine whether customer records were included. The disclosure matters because the stolen-data scope is still being verified and the leak may affect a very large customer base.
Related Happenings
Seoul Metropolitan Police raid on Coupang breach records
Law Enforcement
First: 26.01.2026 15:00
Last: 26.01.2026 15:00
Sources 1
About this happening:
**Seoul Metropolitan Police Agency** raided **Coupang’s headquarters in southern Seoul** to search for **internal documents and records related to the breach**, escalating the off...
Seoul Metropolitan Police raid on Coupang breach records
Law EnforcementAbout this happening: **Seoul Metropolitan Police Agency** raided **Coupang’s headquarters in southern Seoul** to search for **internal documents and records related to the breach**, escalating the off...
Kyowon Group hit by ransomware attack
Incident
First: 14.01.2026 23:49
Last: 14.01.2026 23:49
Sources 1
How related:
Kyowon confirmed the ransomware incident, disclosing that it occurred on January, around 10 a.m., and that the attacker exfiltrated customer data.
About this happening:
The **Kyowon Group** confirmed a **ransomware attack** that disrupted operations and led to **customer data exfiltration**, creating immediate availability and exposure risk. The...
Kyowon Group hit by ransomware attack
IncidentHow related: Kyowon confirmed the ransomware incident, disclosing that it occurred on January, around 10 a.m., and that the attacker exfiltrated customer data.
About this happening: The **Kyowon Group** confirmed a **ransomware attack** that disrupted operations and led to **customer data exfiltration**, creating immediate availability and exposure risk. The...
Korean Air employee data leak via KC&D breach
Data Leak
First: 29.12.2025 15:08
Last: 29.12.2025 15:08
Sources 1
About this happening:
The airline disclosed a **data breach** that exposed employee **names** and **bank account numbers**, creating fraud and impersonation risk for **Korean Air** staff. The leak foll...
Korean Air employee data leak via KC&D breach
Data LeakAbout this happening: The airline disclosed a **data breach** that exposed employee **names** and **bank account numbers**, creating fraud and impersonation risk for **Korean Air** staff. The leak foll...
Coupang customer data leak exposing 33.7 million records
Data Leak
First: 01.12.2025 17:45
Last: 01.12.2025 17:45
Sources 1
About this happening:
Coupang confirmed a **data leak** that exposed personal information for **33.7 million customers**, creating a broad impersonation and phishing risk. The exposed data included **n...
Coupang customer data leak exposing 33.7 million records
Data LeakAbout this happening: Coupang confirmed a **data leak** that exposed personal information for **33.7 million customers**, creating a broad impersonation and phishing risk. The exposed data included **n...
Latest development: 12.12.2025 20:28
Seoul Metropolitan Police Agency linked the Coupang customer data leak to a 43-year-old Chinese national who had worked at Coupang and was assigned to an authentication management system. Investigators said he left the company in 2024 but retained access to internal systems, and they continued gathering logs, access histories, user credentials, and other records from Coupang offices.
Timeline
-
14.01.2026 23:49 2 articles · 4mo ago
Kyowon Group discloses ransomware-related data leak
Initial DisclosureKyowon Group said its systems had been targeted in a suspected ransomware attack that disrupted operations and caused service outages, and a later update confirmed an external data leak with some data stolen while investigators worked with authorities and security experts to determine whether customer information was included. The company also notified Korea’s Internet & Security Agency (KISA) and said online services were being restored.
Show sources
- South Korean giant Kyowon confirms data theft in ransomware attack — www.bleepingcomputer.com — 14.01.2026 23:49
- South Korean giant Kyowon confirms data theft in ransomware attack — www.bleepingcomputer.com — 14.01.2026 23:49