Kyowon Group Shuts Down Internal Network After Suspected Ransomware Attack

Keypoints

• Kyowon Group shut down its internal network after detecting a suspected ransomware attack.
• An internal investigation is underway to determine the scope and impact of the incident.
• Multiple websites operated by Kyowon subsidiaries are currently unavailable.
• The company reported the suspected security breach to the Korea Internet & Security Agency and relevant authorities.
• No specific ransomware strain or threat actor has been publicly identified so far.
• The outage may disrupt subsidiary operations and external access to affected web services.
• The incident was reported on 2026-01-11; the organization is based in South Korea.