Yes24 to Resume Book and Ticket Services on the Afternoon of June 13

Online bookstore Yes24 announced on the afternoon of June 13, the fifth day since it suffered a ransomware hacking attack that caused service disruptions, that it plans to resume some services later in the day.

According to Yes24, book and ticket services will be restored first, with other services becoming available sequentially. Yes24 stated that it will provide updates regarding the service resumption schedule through its website and social networking services (SNS) as soon as it is finalized.

Yes24 said, "All of our employees are doing their utmost to resolve this incident as quickly as possible while maintaining an emergency response system," adding, "We are making every possible effort, including seeking assistance from external experts in each field."

Additionally, the company announced measures to prevent recurrence. Yes24 stated, "We sincerely apologize once again for the inconvenience caused to our customers," and added, "To prevent similar disruptions from happening again, we will conduct thorough security checks of our entire system and data, and establish the highest level of cyber defense measures."

Regarding the issue where the Korea Internet & Security Agency (KISA) refuted Yes24's previous claim that it was cooperating with KISA, the company explained that this was due to "confusion in internal understanding and communication processes." Yes24 clarified, "KISA visited us twice, on June 10 and 11, and we had discussed beginning full-scale cooperation once the situation was somewhat under control," adding, "We understood that an investigation had begun even without a separate technical support request."

The company further stated, "On June 12, we requested technical support from KISA regarding the ransomware investigation, and on the same afternoon, a KISA investigation team visited us and began a joint investigation."