INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Forty-seven top cybersecurity companies face disciplinary action for data breaches

| 2026-10-14 19:08 CRITICAL LOW INDUSTRY & POLICY
JSON
Executive Summary
AI-generated
A recent analysis by the National Assembly found that 47 companies, which have been designated as "excellent" for investment in information security and authentication, have received administrative penalties for personal data breaches over the past four years. The Korea Internet & Security Agency (KISA) has analyzed these cases, revealing that from 2023 to 2026, a total of 22, 13, 4, and 8 companies respectively received penalties, affecting approximately 37,870,000 people in 2026 alone. This attack works by exploiting vulnerabilities in the companies' systems, allowing for unauthorized access to personal data. The current status is that these companies have been identified as having inadequate security measures, leading to a re-evaluation of their "excellent" designation and prompting calls for review of evaluation criteria.
Technical Mitigations AI-generated
• Implement ISMS (Information Security Management System) certification and ensure it is built and operated in accordance with predetermined standards. • Regularly review and update access rights management, vulnerability response, personal information processing, and subcontracted company management to prevent incidents. • Establish clear standards for the disclosure of cybersecurity investments, personnel, and activities to provide users with accurate information about a company's security level.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
governmentgovernment
Incident Timeline
‎April 2026
The ministry announced in April 2026 that it would revise the 'Guidelines for Disclosure of Cybersecurity' to better align with the current situation.
‎2023 to 2026
Forty-seven top cybersecurity companies that were previously designated as "excellent" for investment in information security and authentication received administrative penalties for personal data breaches between 2023 and 2026.
general_metric 47 companies
The result shows that from 2023 to 2026, a total of 47 companies that have been designated as "excellent" for investment in information security and authentication have received administrative penalties for personal data breaches.
‎2026/10/14
Forty-seven top cybersecurity companies face disciplinary action for personal data breaches over the past four years, according to a recent analysis by the National Assembly.
organisation the National Assembly
A recent analysis by the National Assembly found that 47 companies, which have been designated as "excellent" for investment in information security and authentication, have received administrative penalties for personal data breaches over the past four years.
organisation The Korea Internet & Security Agency
The Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission have been analyzed by Rebuilding Korea Party member Kim Sun-min, a member of the National Assembly's Science, Technology, Information and Broadcasting Committee.
organisation KISA
The Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission have been analyzed by Rebuilding Korea Party member Kim Sun-min, a member of the National Assembly's Science, Technology, Information and Broadcasting Committee.
organisation the Personal Information Protection Commission
The Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission have been analyzed by Rebuilding Korea Party member Kim Sun-min, a member of the National Assembly's Science, Technology, Information and Broadcasting Committee.
organisation Rebuilding Korea Party
The Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission have been analyzed by Rebuilding Korea Party member Kim Sun-min, a member of the National Assembly's Science, Technology, Information and Broadcasting Committee.
organisation GS Retail
The main cases include Coupang, Lotte Card, GS Retail, KT, SK Telecom, and U+ Brothers.
organisation KT
The main cases include Coupang, Lotte Card, GS Retail, KT, SK Telecom, and U+ Brothers.
organisation SK Telecom
The main cases include Coupang, Lotte Card, GS Retail, KT, SK Telecom, and U+ Brothers.
organisation U+ Brothers
The main cases include Coupang, Lotte Card, GS Retail, KT, SK Telecom, and U+ Brothers.
organisation ISMS
The disclosure of information protection is a system that publicly discloses the investment, personnel, and activities of a company, while the certification of ISMS is a system that evaluates whether the information protection management system is built and operated in accordance with the predetermined standards.
organisation The Ministry of Science
The Ministry of Science and ICT is also pushing for the improvement of the cybersecurity disclosure system.
organisation ICT
The Ministry of Science and ICT is also pushing for the improvement of the cybersecurity disclosure system.
Intelligence Sources
Dailysecu 2026-10-14