logo

Second ransomware attack in two months disrupts South Korean ticketing giant

ID: c934732c-954a-5b6e-8226-fe195fc14c6b

STIX ID: report--c934732c-954a-5b6e-8226-fe195fc14c6b

Feed Name: The Record from Recorded Future News

Threat Score
70/100

Date Published: 2025-08-12

Date Updated: 2026-05-01

...
...

Yes24, South Korea’s largest ticketing and online book retailer, was hit by a ransomware attack that took its website and mobile app offline for several hours (restored within seven hours), disrupting ticket sales and e-book access; this is the company’s second ransomware incident in under two months after a June attack that forced a five-day outage. The report notes no named attacker or confirmed ransom demand, prior criticisms about backup and security shortcomings, regulatory fines and earlier data-security incidents, and heightened concern because ticketing platforms hold large volumes of personal and high-value transaction data.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.