INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Korea Electric Association Destroys Leaked Member Account Numbers Thoroughly
Executive Summary
AI-generated
The Korea Electric Association experienced a personal information leak incident, which began on October 16 last month. The association is behind the incident and has taken measures to address it. As of October 23, all member account numbers had been deleted from their existing database and replaced with a new system. This follows previous announcements by the association regarding countermeasures for the incident. The affected members are those who stored personal information in the old database, totaling an unknown number. To prevent further incidents, the association has advised its members to be cautious when clicking on links that impersonate the organization, inputting sensitive information, and making transfers. They have also been instructed to check their email accounts and financial records for unusual activity. The current status is that the new account management system is in place, with only minimum necessary financial information being collected when required, and automatically deleted once processed.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope