Dark Web Claims Target Nexon Korea and SK Telecom in Alleged Data Thefts A ransomware group known as Global Secret Group (GSG) has listed Nexon Korea Corp. on its dark web leak platform, claiming to have exfiltrated 4.2 terabytes (TB) of data from the company. The group posted the alleged breach on July 27 at approximately 3:00 a.m. KST, asserting it had compromised nearly 30 organizations, including Nexon Korea. However, GSG provided no verifiable evidence, such as sample files or proof-of-concept data, to substantiate the claim. Nexon Korea, which last experienced a major breach in 2011 when 13.2 million MapleStory users’ data was exposed has since strengthened its cybersecurity measures. A company spokesperson confirmed that an investigation into the claim is underway. Cybersecurity analysts warn that new ransomware groups often exaggerate or fabricate claims to pressure victims into negotiations or boost their reputation. In a separate incident, an actor on BreachForums using the handle "max987" claimed on July 22 at around 10:00 p.m. KST to possess 26 million SK Telecom subscriber records. Both SK Telecom and the Korea Internet & Security Agency (KISA) dismissed the claim, stating the dataset was fabricated and that no breach of operational systems occurred. SK Telecom noted that such fraudulent listings appear monthly on underground forums without verification. Security experts, including Professor Yeom Heung-yeol of Soonchunhyang University, highlight that threat actors increasingly use AI tools for reconnaissance and social engineering. While new ransomware groups may lack a proven track record, their technical capabilities should not be underestimated. Under South Korea’s Personal Information Protection Act, organizations must follow statutory notification procedures if a breach is suspected, even before confirmation.