MSIT to Investigate GS E&C Cybersecurity Incident Ex Officio in First Case Since Information and Communications Network Act Revision

[Financial News] The Ministry of Science and ICT (MSIT) will launch an ex officio investigation into a cybersecurity incident involving GS E&C’s reservation and management system for apartment community facilities. This is the first such investigation since the revised Information and Communications Network Act, which strengthened the government’s authority to investigate cybersecurity incidents, took effect last October. The government will directly determine the cause of the incident and the extent of the damage despite the company’s refusal to consent to the investigation.
The Ministry of Science and ICT said on the 11th that it had decided to conduct an ex officio investigation into the GS E&C cybersecurity incident following deliberations by the Incident Investigation Review Committee.
GS E&C reported a cybersecurity incident that occurred on the 29th of last month in its reservation and management system for apartment community facilities. However, the company said it would analyze the incident itself and did not consent to an investigation by the Ministry of Science and ICT and the Korea Internet & Security Agency (KISA).
In response, the Ministry of Science and ICT convened the Incident Investigation Review Committee that day. The committee agreed that a government-initiated investigation was necessary given the significance of the case, including the scale of the data leak and the sensitivity of the leaked information.
This is the first ex officio investigation since the revised Information and Communications Network Act took effect on the preceding October 1, strengthening the government’s authority to investigate cybersecurity incidents. The revised law established a statutory review committee to enable a proactive response to cybersecurity incidents and allows the government to launch an ex officio investigation when certain criteria are met, regardless of whether a company consents to an investigation.
The Ministry of Science and ICT made its final decision to launch an ex officio investigation after considering the committee’s deliberations, the data leak and the possibility of further damage. If investigators determine during the investigation that the incident constitutes a serious cybersecurity incident, the ministry plans to consider forming a Public-Private Joint Investigation Team following review by the committee.
[email protected] Choi Hye-rim Reporter