( October 29, 2026, 06:20 GMT | Official Statement) -- MLex Summary: South Korean education company Daekyo has been fined about 3.3 billion won ($2.5 million) for failing to adequately protect personal information following two cyberattacks that exposed data on approximately 650,000 users. The Personal Information Protection Commission said Thursday it found that hackers exploited a vulnerability in an affiliate’s website to access Daekyo’s customer database in August 2024 and February 2025, with the company failing to properly respond to security alerts after the first attack and allowing unnecessary access to the database. Separately, Young-Hoon Medical Foundation, which operates two hospitals, was fined 630 million won after a March 2024 SQL injection attack exposed information on 188,481 website members, with investigators identifying inadequate protection against web attacks and insecure password encryption. The regulator issued corrective orders to both organizations, bringing the combined fines to 3.9 billion won.Statement is attached (in Korean)....
Prepare for tomorrow’s regulatory change, today
MLex identifies risk to business wherever it emerges, with specialist reporters across the globe providing exclusive news and deep-dive analysis on the proposals, probes, enforcement actions and rulings that matter to your organization and clients, now and in the longer term.
Know what others in the room don’t, with features including:
- Daily newsletters for Antitrust, M&A, Trade, Data Privacy & Security, Technology, AI and more
- Custom alerts on specific filters including geographies, industries, topics and companies to suit your practice needs
- Predictive analysis from expert journalists across North America, the UK and Europe, Latin America and Asia-Pacific
- Curated case files bringing together news, analysis and source documents in a single timeline
Experience MLex today with a 14-day free trial.