Gyowon Group: "Number of Customers at Risk of Data Leak Reaches 5.54 Million"

"The Figure of 9.6 Million Includes Overlapping Accounts"

The number of customers potentially affected by information leaks due to the ransomware attack targeting Gyowon Group has surpassed 5.5 million.

On January 14, Gyowon Group stated, "The number of customers whose information may have been leaked, as reported to the Korea Internet & Security Agency (KISA) on January 10 following the ransomware incident, is 5.54 million," adding, "The figure of '600 virtual servers' refers to the total number of virtual servers created from actual equipment, while the number of physical server devices currently in possession is 30."

Gyowon Group, Jung-gu, Seoul. Photo by Jinhyung Kang aymsdream@

Previously, some media outlets reported that out of the 800 servers owned by Gyowon Group, approximately 600 virtual servers were within the scope of the ransomware infection, and that the number of major service users affected by the ransomware, based on overlapping accounts, was estimated at around 9.6 million.

Gyowon Group stated, "We are currently at the stage of confirming whether any data has been leaked externally, and we are conducting a thorough investigation in cooperation with relevant authorities and security experts to determine whether customer information was actually included." The company added, "If it is confirmed that customer information has been leaked, we will provide transparent notification."