Incident record
에스지아이서울보증
SGI Seoul Guarantee Insurance · Finance
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
Not disclosed (exfiltration contested)
Disclosure recorded
2025-07-15
Sector
Finance
Practical risk
Medium
What this means
A practical reading of this record
The available record is still being investigated. The current risk level is medium because the final scope or data categories may change.
- Follow the organisation’s official notice, use a unique password, and be cautious of follow-up messages using details from the incident.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
A regulator, company, or credible reporting source indicates that the matter is under investigation.
This remains Investigating: the claimed exfiltration volume and affected-person figure are not confirmed by the company or regulator.
Recorded source · Company statement and Korean media reporting
Direct source links are being standardised in the source archive. Until then, this page names the current evidence basis rather than substituting a generic link.
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2025-08-05
The most recent dated event currently documented on this page.
Investigating
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
Ransomware attack
SGI Seoul Guarantee experienced a ransomware incident and service outage.
- 02
Dark-web claim
The Gunra group claimed data exfiltration. The company disputed confirmed personal-data theft.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.