INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Lotte Chemical employee Son Myeong-soo's data leaked at Handong Hospital

| 2026-10-22 09:03 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach at Lotte Chemical on August 27th, 2026, exposed the personal information of approximately 32.1% (5,022 individuals) out of a total of 15,631 affected former employees. The breach involved leaked information including name, login ID, mobile phone number, email address, ID number, and job title. Some former employees were not notified in a timely manner due to the company incorrectly classifying them as active employees, resulting in some receiving internal emails that were no longer usable. Lotte Chemical has acknowledged the incident, blocked related systems, reported it to relevant institutions, and began investigating the cause and scope of the breach.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope educationeducation healthhealth
Incident Timeline
‎August 27th
Threat actors used an external attack on ECOMS to target the personal information of 5,022 former Lotte Chemical employees.
‎October 13th
Notifications were sent to affected individuals on October 13th, but some did not receive them.
‎2026/10/22
Threat actors leaked the personal information of 5,022 former employees from Handong University Hospital.
victims 5,022 former employees
A data breach at Lotte Chemical has exposed the personal information of 5,022 former employees, with some not being notified of the incident in a timely manner.
Former Lotte Chemical employee Son Myeong-soo's hospital, Handong University Hospital, reported that 5,022 former employees' personal information was leaked, with some phone numbers missing..
However, it is worth noting that not all 5,022 former employees were notified, and the notification failure was limited to some individuals.
organisation Lotte Chemical
Former Lotte Chemical employee Son Myeong-soo's hospital, Handong University Hospital, reported that 5,022 former employees' personal information was leaked, with some phone numbers missing..
organisation Handong University Hospital
Former Lotte Chemical employee Son Myeong-soo's hospital, Handong University Hospital, reported that 5,022 former employees' personal information was leaked, with some phone numbers missing..
organisation Democrat Party
Democrat Party of Korea lawmaker Son Myeong-soo pointed out that the breach involved 15,631 individuals, with 5,022 of them being former employees, accounting for approximately 32.1% of the total affected.
organisation the Personal Information Protection Act
Article 21,000,000,000,000 of the Personal Information Protection Act stipulates that personal information should be immediately deleted when the storage period has passed or the purpose of processing has been achieved, and that unnecessary personal information should be deleted without delay.
organisation the Personal Information Protection Committee
The Chairman of the Personal Information Protection Committee, Song Kyung-hee, replied that even if there is a need to store the information of a retired individual in accordance with other laws, only the minimum necessary information should be separately stored and preserved.
organisation Lotte Chemical's
The main focus of the inquiry was on Lotte Chemical's practices for storing the information of retired individuals, including the basis and scope of storage, and the timing and correction of classification errors.
Tactical Metrics
Metrics
victims
5,022
Former Employees
A data breach at Lotte Chemical has exposed the personal information of 5,022 former employees, with some not being notified of the incident in a timely manner.
Former Lotte Chemical employee Son Myeong-soo's hospital, Handong University Hospital, reported that 5,022 former employees' personal information was leaked, with some phone numbers missing..
However, it is worth noting that not all 5,022 former employees were notified, and the notification failure was limited to some individuals.
Intelligence Sources
Dailysecu 2026-10-22