Personal Data of Some 24,000 KEPCO Employees Leaked; Customer Information Unaffected

The personal data of some 24,000 Korea Electric Power Corporation (KEPCO) employees was exposed on an external web page. In a statement released on the 4th, KEPCO said it became aware of the incident at around 3:59 p.m. on the 1st.

The exposed information included employees' names, affiliations, and phone numbers, but did not contain unique identification numbers such as resident registration numbers or sensitive information, and customer data was not among the leaked information, the company said. The exposed information was removed around midnight on the 2nd, roughly 32 hours after KEPCO became aware of the breach.

Upon learning of the incident, KEPCO immediately blocked internal system access related to employee personal data and requested the operator of the web page to delete the information. The company has set up an emergency response situation room and is operating a cooperation framework with relevant authorities.

Affected employees were notified of the circumstances via text message and email and given guidance on measures to prevent secondary damage. A KEPCO official said, "If anyone reports actual or anticipated damage, we will conduct the necessary investigation and proceed with relief measures such as compensation."

"We are undergoing verification procedures with a specialized agency based on the cause identified internally," the official said, adding, "We believe this incident is unrelated to the AI-based hacking attacks targeting the financial sector."