Alphabiz - SK Shieldus Hack Sparks Secondary Data Leak Concerns, Involving SK Telecom and Major Korean Firms

[Alpha Biz= Kim Jisun] SEOUL, Oct. 21 — The fallout from the recent SK Shieldus hacking incident continues to escalate, with leaked data reportedly including materials unrelated to the security firm itself, such as internal documents linked to SK Telecom, raising fears of secondary breaches across key South Korean industries.


According to data obtained by Rep. Choi Soo-jin of the National Assembly’s Science, ICT, Broadcasting and Communications Committee from the Korea Internet & Security Agency (KISA), the hacker group “Black Suit Rantak” claimed responsibility for breaching 24 gigabytes of data from SK Shieldus. The group released 42 proof images and sample files on the dark web after the company ignored two prior warnings issued on October 10 and October 13.


The exposed files allegedly include administrator IDs and passwords, security network configurations, website source codes, and client technical documents. Among the leaked materials were:


SK Telecom’s service documentation describing SK Shieldus’s network monitoring and automation systems,


KB Financial Group’s integrated security control system design files,


SK hynix’s incident response solution documents, and


Korea Financial Security Institute’s software architecture diagrams.
 

Alphabiz Reporter Kim Jisun(stockmk2020@alphabiz.co.kr)