January 15, 2026 By Pierluigi Paganini
South Korean conglomerate Kyowon confirmed a ransomware attack that disrupted operations and may have exposed customer data.
Kyowon Group is a major South Korean conglomerate with diverse business interests spanning education, publishing, media, and technology. It operates nationwide, serving millions of customers through its various subsidiaries and brands. The company is a significant player in South Korea’s corporate landscape, combining traditional and modern sectors under one umbrella.
Kyowon detected abnormal activity on Saturday, January 10, triggering an emergency response that isolated affected servers to prevent further compromise. The conglomerate confirmed signs that data may have leaked in a ransomware attack, though customer information impact is still under investigation. Several affiliate websites remain offline as Kyowon works with external cybersecurity experts and authorities to restore systems and assess the breach.