The company said that, following an inquiry from a state insurance regulator on June 13, 2024, it began a review of potential vulnerabilities related to access permissions and user identity management for a company web portal.

1. 01

   The company said that, following an inquiry from a state insurance regulator on June 13, 2024, it began a review of potential vulnerabilities related to access permissions and user identity management for a company web portal.

2. 02

   The company said unauthorized access to some consumer and policyholder information likely occurred through the web portal.

3. 03

   The company said it removed external access to the portal immediately upon being notified of the situation, activated its incident response plan and retained security experts to assist with the investigation and remediation.

4. 04

   The company said the investigation is ongoing and the full scope, nature and impact of the incident are not yet known. It said the incident has not had a material impact on its operations to date, and it has not determined whether the incident is a material cybersecurity incident required to be reported under Form 8-K Item 1.05.

Analysis scope · Filing bodyWe analyzed the filing body and confirmed exhibits. This is not a review of other exhibits, investor presentations or the full earnings call.

AI summarized the filing and translated the summary into English; it may differ from the original. For reference only, not investment advice. AI translated the published Korean report into English. Figures are copied as filed, not recalculated.

Original filing

The filing as submitted to SEC EDGAR. You can check the figures and statements of this summary against it.