Boannews reports that Korean builder GS E&C confirmed unauthorized external access around 22:15 on October 28, 2026 to the community facility reservation system (formerly FMCS) of its Xi apartments, leaking resident data, and reported it to KISA and the Personal Information Protection Commission [2]. Possibly leaked items include name, nickname, birth date, phone, gender, email, address, member number, residence type, one-way encrypted password and RF card number, varying by resident; GS E&C had declined a government probe, but the science ministry ordered an ex officio investigation on November 11 after a review committee deliberation [2][1]. GS E&C advises residents to watch for smishing, voice phishing and requests for personal data and to change their passwords, including the same password reused on other sites [2].
GS E&C's Xi apartment booking system breached, leaking resident data; Korea orders first committee-backed ex officio probe
1 min read
- Disclosed
- Oct 30, 2026
- Occurred
- Oct 28, 2026
- Published
- Nov 12, 2026
- Last updated
- Nov 12, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Cross-industry
What to do nowOur advice
GS E&C advises residents to watch for smishing, voice phishing and requests for personal data and to change their passwords, including the same password reused on other sites [2]
Timeline
Technical details
Remediation
Vendor guidance
- 1Change passwords and beware of scams mitigate[2]
Change Xi and reused passwords and beware of smishing and voice phishing.
References
Media2
- [1]보안뉴스2026-11-11Accessed 2026-11-12Snapshot 2026-11-12 sha256 ccfd91180e1a
“과학기술정보통신부(부총리 겸 장관 배경훈)는 GS건설 침해사고에 따른 피해 현황 및 사고 원인 등을 조사하기 위해 11일 직권조사 실시를 결정했다고 밝혔다.”
- [2]보안뉴스2026-10-30Accessed 2026-11-12Snapshot 2026-11-12
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.