Ransomware Infection at South Korean Cord Blood Bank May Have Exposed Personal Data

Summary
Boryeong Cord Blood Bank reported a ransomware infection affecting its personal-information system. Names, ID numbers, contact details and birth information may have been exposed; South Korea’s privacy commission is investigating.
Key points
- Boryeong Cord Blood Bank reported a ransomware infection on September 20, 2026.
- The infection affected the system used to process personal information.
- Mothers’ and children’s names, ID numbers and phone numbers may have been exposed.
- Children’s birth details and, for members registered before July 2016, occupational information may also have been affected.
- The bank said that, so far, no financial or highly sensitive information was included.
- South Korea’s Personal Information Protection Commission has opened an investigation.
Article Details
- Victim Organization
- Boryeong Cord Blood Bank
- Victim Domain
- brcell.co.kr
- Incident Type
- Ransomware infection affecting the personal information processing system; a personal data leak was reported as possible.
- Disclosure Date
- 2026-09-20
- Data Types Exposed
- Mothers’ and children’s names
- ID numbers
- Phone numbers
- Children’s birth details
- Occupational information for members registered before July 2016
- Operational Impact
- The ransomware infection affected the system used to process personal information. No further operational impact was reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- alleged
