INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

South Korea Power Company Exposes 65 Retired Employees' Personal Data

| 2026-10-29 18:46 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 29, 2026, South Korea Power Company (KEPCO) confirmed that personal data of 65 retired employees had been leaked, including their names and phone numbers. The leak occurred as part of an ongoing investigation into a previous data breach incident involving KEPCO's employees, which was first notified to the affected individuals on October 8. An investigation by relevant agencies is currently underway to determine the exact timing and circumstances of the initial leak and identify its cause. The leaked personal information may have been compromised due to inadequate security measures, specifically in cases where contact information had not been secured for individual retired employees. KEPCO has advised caution regarding phishing-related damage and provided guidance on protective measures to prevent misuse of signatures and financial transactions.
Technical Mitigations AI-generated
• Block phishing calls, emails, and text messages that impersonate KEPCO. • Use protective measures to prevent misuse of signatures and financial transactions. • Monitor for suspicious activity related to the data breach incident.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
energyenergy
Incident Timeline
‎October 8
Threat actors used social engineering tactics to target the South Korea Power Company, resulting in 65 retired employees' names and phone numbers being exposed.
tactic Data Breach
Earlier, the company had confirmed the data breach incident involving its employees and notified the target individuals on October 8.
‎October 29
KEPCO confirmed on October 29 that additional personal data leak facts had been confirmed regarding the previously disclosed data breach incident.
tactic Data Breach
KEPCO announced on October 29 that it had posted a notice on its official website stating that additional facts had been confirmed regarding the data breach incident.
organisation KEPCO
KEPCO announced on October 29 that it had posted a notice on its official website stating that additional facts had been confirmed regarding the data breach incident.
‎2026/10/29
Threat actors leaked personal information of 65 retired employees, including names and phone numbers.
organisation South Korea Power Company
South Korea Power Company, confirmation of additional personal data leak... 65 retired employees' names and phone numbers exposed.. KEPCO
victims 65 retired employees
South Korea Power Company, confirmation of additional personal data leak... 65 retired employees' names and phone numbers exposed.. KEPCO
Confirms Release of Personal Information of 65 Retired Employees in Ongoing Investigation into Data Breach Incident Following previous guidance on the data breach incident, the investigation has uncovered additional facts, indicating that personal information of 65 retired employees was leaked.
The company confirmed that personal information of 65 retired employees had been leaked.
Subsequent investigation revealed that the personal information of the 65 retired employees had also been leaked.
The leaked personal information of the 65 retired employees includes their names, addresses, fax numbers, and mobile phone numbers.
organisation Data Breach Incident Following
Confirms Release of Personal Information of 65 Retired Employees in Ongoing Investigation into Data Breach Incident Following previous guidance on the data breach incident, the investigation has uncovered additional facts, indicating that personal information of 65 retired employees was leaked.
organisation the Personal Information Protection Act
Therefore, KEPCO notified the public on its website of the data breach incident in accordance with Article 1, Section 34,000,000,000,000 of the Personal Information Protection Act and Article 39,000,000,000,000, Section 3 of the Enforcement Rules of the Act.
organisation the Personal Information Protection Commission
A probe by the Personal Information Protection Commission and related agencies is underway to investigate the incident...
organisation Korea Electric Power Corporation
Korea Electric Power Corporation (KEPCO) stated that an investigation and analysis by the Personal Information Protection Commission and related agencies are ongoing to determine the exact timing and circumstances of the initial leak and to identify the cause of the incident.
Tactical Metrics
Metrics
victims
65
Retired Employees
South Korea Power Company, confirmation of additional personal data leak... 65 retired employees' names and phone numbers exposed.. KEPCO
Confirms Release of Personal Information of 65 Retired Employees in Ongoing Investigation into Data Breach Incident Following previous guidance on the data breach incident, the investigation has uncovered additional facts, indicating that personal information of 65 retired employees was leaked.
The company confirmed that personal information of 65 retired employees had been leaked.
Subsequent investigation revealed that the personal information of the 65 retired employees had also been leaked.
The leaked personal information of the 65 retired employees includes their names, addresses, fax numbers, and mobile phone numbers.
Intelligence Sources
Dailysecu 2026-10-29