Taekwang Networks Information confirms data leak after Everest hack claim
The company said staff names and phone numbers or email addresses were exposed through abnormal access to a Microsoft 365 OneDrive account around October 12.
Taekwang Networks Information has officially acknowledged that personal information was leaked through an external hack, posting a notice on its website on October 21, according to Daily Secu.
The company said the leak stemmed from abnormal external access around October 12 through a Microsoft 365 OneDrive account used for work. The confirmed leaked items are staff names and mobile phone numbers or email addresses, and the company said it is investigating the cause and the exact scope of the breach.
The acknowledgement follows a claim by the ransomware group Everest, which said it took about 263.71GB across 54,581 files from the company and published 62 categories of material on its dark web site.
Taekwang Networks Information said it disabled the affected Microsoft 365 account, blocked further abnormal access, strengthened monitoring, and reported the incident to the Personal Information Protection Commission and KISA.
The company also warned business partners to beware of phishing that impersonates the company to request remittance or bank account changes.
Prior reporting and the group behind the claim
On October 17, 2026, Daily Secu reported that Everest had claimed to have taken about 263.71GB across 54,581 files from the company. Everest is described as a Russian-speaking cybercrime group active since late 2020 that has shifted toward brokering initial access.
Quick answers
What data was leaked from Taekwang Networks Information?
The company confirmed that staff names and mobile phone numbers or email addresses were exposed. It said it is still investigating the cause and exact scope.
How did the breach happen?
According to the company, the leak stemmed from abnormal external access around October 12 through a Microsoft 365 OneDrive account used for work.
What has the company done since the leak?
It disabled the affected Microsoft 365 account, blocked further abnormal access, strengthened monitoring, and reported the incident to the Personal Information Protection Commission and KISA.