( November 12, 2026, 02:57 GMT | Official Statement) -- MLex Summary: Four companies affiliated with South Korea's Samyang Group have been sanctioned over security failures linked to a 2022 data breach exposing personal information belonging to nearly 150,000 individuals. The Personal Information Protection Commission said Thursday it had decided to impose a combined 552 million won ($414,000) in fines and 16.2 million won in administrative penalties on Samyang Holdings, Samyang Corp. and Samyang Packaging, while ordering IT services subsidiary Samyang Data Systems to take corrective measures. Investigators found that a hacker exploited an email server vulnerability to obtain administrator privileges and steal credentials for an internal file server left connected to external networks after a data migration, extracting 1.3 terabytes of files containing employee, shareholder and other related individuals' information, including nearly 83,000 national identification numbers. The regulator also identified failures to encrypt identification numbers, delete outdated personal data and document outsourcing arrangements.Statement is attached (in Korean)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.