GS E&C, Personal Information of Some Apartment Residents Exposed... Scale of Damage Under Investigation

Investigating the scale of the breach and whether individual customers were affected
Residents' personal information, including names and phone numbers, exposed
Resident registration numbers and financial information not exposed

GS E&C said on October 30 that an external hacking attack on its apartment community facility reservation management system, including the former FMCS, had exposed residents' personal information.

GS E&C said it detected signs of unusual access at 11:29 p.m. on October 28, immediately blocked the access, and conducted a detailed analysis of the logs. The analysis confirmed that unauthorized external access had occurred at around 10:15 p.m. that day.

The information potentially exposed includes names, nicknames, dates of birth, mobile phone numbers, gender, email addresses, residential addresses, membership numbers, types of residence, passwords (stored using one-way encryption and therefore not recoverable through decryption), administrator IDs, whether the member is the head of household, membership registration dates and times, IP addresses used for the most recent login, and RF card numbers. However, resident registration numbers and other unique identification information, as well as financial information such as bank account and credit card numbers, were not collected and were therefore not among the information exposed.

This is the full list of information that may have been exposed; the specific information involved may vary by customer.

The company said it would provide details of the information actually exposed and explain how customers can check whether they were affected after the investigation is complete.

A GS E&C representative said, "Immediately after becoming aware of the incident, we completed emergency measures, including blocking external IP addresses, applying security policies, and reporting the incident to the relevant authorities. We are also working on measures to prevent a recurrence." The representative added, "Please be cautious of smishing, voice phishing, and requests to provide personal information, and we recommend changing your passwords."

The representative added, "We sincerely apologize for the concern caused by the exposure of personal information. We will further strengthen our personal information protection framework and security measures to prevent a recurrence."

This content was produced with the assistance of AI translation services.