---
title: Government Launches First Ex Officio Investigation into GS Construction Data Leak
url: https://www.dataloco.com/en/government-launches-first-ex-officio-investigation-into-gs-construction-data-leak
published: 2026-11-14T20:21:11+00:00
language: en
section: Security
source: https://www.dailysecu.com/news/articleView.html?idxno=209460
organizations: GS Construction, KISA
publisher: Dataloco
---

# Government Launches First Ex Officio Investigation into GS Construction Data Leak

The South Korean government has decided to directly investigate the cause and scale of a personal information leak involving residents of apartments managed by GS Construction.

On November 11, the Ministry of Science and ICT announced it would conduct an ex officio investigation into a security breach of the reservation and management system for apartment community facilities. This marks the first instance of an ex officio investigation decided by the Breach Incident Investigation Deliberation Committee, a body established under the revised Information and Communications Network Act that took effect on October 1.

GS Construction identified unauthorized external access to the system, which includes the FMCS, on October 28 at approximately 10:15 PM. The company reported the breach to relevant authorities on October 29 and notified residents of the potential leak on October 30.

There are 15 categories of information that may have been leaked: names, nicknames, dates of birth, mobile phone numbers, gender, email addresses, addresses, member numbers, residence types, encrypted passwords, administrator IDs, head of household status, membership registration dates, final login IP addresses, and RF card numbers. The leak is particularly notable because it may include residential details and RF card numbers, which are linked to facility use and apartment entry. However, it has not been confirmed if the RF card numbers were used to grant actual access or if they could be used to clone cards.

The final number of affected apartment complexes, the total number of residents, and the actual scope of data exported have not been confirmed. The listed items are those with the possibility of leakage, not necessarily leaked for all residents.

GS Construction previously stated it would analyze the cause of the accident internally and did not agree to an investigation by the Ministry of Science and ICT and KISA. The government determined a state-level investigation was necessary due to the sensitivity of the information and the scale of the leak. GS Construction has countered this, stating it did not refuse the investigation itself but rather declined technical support during its own analysis and prevention process, and claims it is cooperating with current KISA procedures.

The investigation will focus on the breach path, the actual volume of leaked data, and whether hackers used specific vulnerabilities or accounts. The government will also examine if the leaked administrator IDs and RF card numbers create further security risks. If the incident is judged to be a serious breach, the government may consider forming a joint public-private investigation team.