KEPCO Exposes Personal Info of All Employees... "Customer Data Safe"

[Anchor]

Amid growing repercussions from personal information leaks in the financial sector, an incident has occurred at Korea Electric Power Corporation (KEPCO) where the personal data of all its employees—numbering over 20,000—was exposed externally. KEPCO stated that "general customer information is safe."

Reporter Kwon Ran has the details.

[Reporter]

KEPCO confirmed around 4:00 PM on October 1 that employee personal information had been exposed on an external webpage.

The leaked data included the names, departments, phone numbers, and email addresses of approximately 24,000 employees, which represents the entire workforce.

However, it was determined that unique identification numbers, such as resident registration numbers, and sensitive information were not included.

KEPCO immediately blocked access to internal systems related to employee personal information and requested the operator of the external webpage to delete the exposed data.

However, the information was not removed until around 12:00 AM yesterday, taking about 32 hours from the time the exposure was recognized.

The exact circumstances of the exposure have not yet been confirmed.

Because the information was exposed on an external webpage rather than KEPCO's own website, authorities are investigating various possibilities alongside relevant organizations, including whether it was a mistake by an outsourced data management company or an external cyber attack.

Regarding the possibility of hacking utilizing AI tools, which has recently recurred in the financial sector, KEPCO maintained a cautious stance, stating that "no signs of hacking have been identified so far" and referring to the incident as an "exposure" rather than a "leak."

KEPCO emphasized that general customers' personal information is managed in a separate, dedicated system and was therefore not exposed in this incident.

[Video Editing: Lee Seung-jin]
※ Please note: This article was translated by AI and may contain errors.