Recommended Free Tools
Korea Electric Power Corporation (KEPCO) said personal information associated with about 24,000 employees was found on an external webpage on October 1, 2026. The company listed names, affiliations and phone numbers among the exposed details; SBS also reported email addresses. KEPCO said resident registration numbers and sensitive information were not exposed. The cause remains under investigation, and no confirmed misuse has been reported in the available accounts.
What employee information was exposed?
KEPCO’s reported list included employees’ names, affiliations and phone numbers. SBS separately included email addresses in its account; that detail was not part of the narrower list reproduced from KEPCO’s statement. KEPCO said unique identifiers such as resident registration numbers, as well as sensitive information, were not exposed. Seoul Economic Daily’s report reproduces the company’s account, while SBS News also reports email addresses.
As an Amazon Associate I earn from qualifying purchases.
The reported scale is about 24,000 employees, according to KEPCO’s October 2026 account. That is the number associated with the exposed information, not a count of people known to have suffered fraud or other harm.
Were KEPCO customers affected?
KEPCO said customer information was not involved because it is managed in a separate dedicated system. That is the company’s assurance; the reports cited here do not provide an independent technical audit of the separation. KEPCO’s public statement gives its account of the incident and response.
#1 Best Overall
Was KEPCO hacked?
The exposure is established; a cyberattack is not. KEPCO reportedly said it had found no signs of hacking at that point. SBS reported that investigators were considering possible explanations, including an outsourced data-management error or an external attack, but neither possibility had been confirmed. Do not treat the presence of information on an external webpage as proof that hackers stole it.
The reports available by October 5, 2026, do not establish how the information reached the webpage, when it first appeared, whether anyone copied it before removal, or whether it was misused. No specific phishing campaign or identity theft was reported in those accounts.
When was the information removed?
KEPCO said it detected the information at about 3:59 p.m. Korea time on October 1, 2026. That is the detection time, not a confirmed estimate of when the information first became visible. KEPCO asked the external webpage operator to remove it. SBS reported that removal took about 32 hours from detection, with the information gone around midnight on October 3; KEPCO’s statement confirmed removal without specifying that elapsed time.
What did KEPCO do after detection?
KEPCO said it blocked access to internal systems related to employee information, requested removal of the information, established an emergency response center and coordinated with relevant authorities. The company said it was conducting its own investigation with those authorities to determine the cause and prepare measures to prevent a recurrence. Its October 4 public statement said affected employees were notified individually by text message or email and given guidance intended to reduce secondary harm.
What should affected employees watch for?
KEPCO advised employees to be cautious about incoming phone calls, emails and text messages. Names, affiliations and contact details can make unsolicited messages seem credible, even when the sender is not known to have obtained anything beyond the exposed information.
- Be wary of unexpected requests for passwords, verification codes, payment, or urgent action, even if a message uses a real name or workplace affiliation.
- Check the sender and contact the purported organization through a channel you already trust rather than replying to the message or using its links.
- Do not share authentication codes or account credentials with callers or message senders.
- Report suspicious contact through the channels KEPCO provided in its employee notice. The reports do not establish that any particular scam has occurred.
What remains unknown?
As of October 5, 2026, the available reporting does not identify the external webpage or its operator, the route by which the information was posted, or the final findings of the investigation. It also does not establish whether the data was copied before removal or whether affected employees experienced misuse. Those details should be treated as unresolved, not inferred from KEPCO’s system-access restrictions or removal request.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
