What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Korea Electric Power Corporation (KEPCO) said personal information associated with about 24,000 employees was exposed on an external webpage. The company reported that the listed data included names, affiliations and phone numbers, but not resident registration numbers or sensitive information. KEPCO said it sought removal, restricted access to related internal systems, notified affected employees and began investigating the cause with relevant authorities.
What KEPCO employee data was exposed?
KEPCO’s reported list included employees’ names, affiliations and phone numbers. SBS also reported that email addresses were exposed; that additional detail was not included in KEPCO’s narrower list as reproduced in contemporaneous coverage. KEPCO said unique identifiers such as resident registration numbers and sensitive information were not exposed. Seoul Economic Daily’s October 2026 report covered KEPCO’s stated categories; SBS News reported the email-address detail.
The company said the information related to about 24,000 employees. This is KEPCO’s reported count, not an independently verified count of people whose data was copied or misused.
Were KEPCO customers affected?
KEPCO said customer information was not involved because it is managed in a separate dedicated system. The available reporting does not include an independent technical audit of that separation, so this should be understood as the company’s assurance. Yonhap News Agency reported KEPCO’s statement.
#1 Best Overall
Was KEPCO hacked?
The exposure is established; a cyberattack is not. KEPCO said it had not identified signs of hacking at that point. SBS reported that investigators were considering possible explanations, including an outsourced data-management error or an external attack, but neither was confirmed. The cause and route by which the information reached the webpage remained under investigation in the reporting available as of October 5, 2026. SBS News
When was the information taken down?
KEPCO said it detected the information on an external webpage at about 3:59 p.m. Korea time on October 1, 2026. That is the detection time; the time the information first appeared online has not been established.
SBS reported that removal took about 32 hours from detection, with the information gone around midnight on October 3. KEPCO confirmed that removal was completed but did not state the elapsed time in its public statement. SBS News
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Repair Windows errors before they cause bigger problemsFix Now →What did KEPCO do after detecting the exposure?
KEPCO said it blocked access to internal systems related to employee information and asked the external webpage operator to remove the material. It formed an emergency response center and coordinated with relevant authorities. On October 4, the company said it had individually notified affected employees by text message or email and provided guidance aimed at preventing secondary harm. KEPCO also said it was investigating the cause and preparing measures to prevent recurrence. KEPCO’s public website and Yonhap News Agency
What should affected employees watch for?
KEPCO advised affected staff to be cautious about incoming phone calls, emails and text messages. Names, workplace affiliations and contact details can make unsolicited messages sound more credible, even when the sender is not connected to KEPCO.
- Be wary of unexpected requests for passwords, verification codes, payment or personal details, even if a message uses your name or workplace.
- Do not rely on a caller’s displayed number or an email’s apparent sender alone. Verify unusual requests through a contact method you already trust.
- Avoid opening unexpected links or attachments, and do not reply with sensitive information.
- Follow any direct instructions KEPCO sent you about reporting suspicious contact or seeking help.
These are precautions, not evidence that a phishing campaign or identity theft has occurred. The reporting available does not establish whether anyone copied the exposed information before it was removed or whether it was misused.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What remains unknown?
The available reports do not identify the webpage or its operator, when the information first became visible, how it was posted, whether copies were made before removal, or whether employees experienced misuse. KEPCO said it was investigating with relevant authorities, but no final findings were reported by October 5, 2026.
Free tools Windows power users keep installed
One-click scans. No signup required.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
