Inha University Hit by Ransomware Attack; 650GB of Data Allegedly Stolen
Learn More
Inha University in South Korea, was hit by a ransomware attack on December 28, 2025. The breach caused a 14-hour shutdown of the university's website and disrupted access to digital services.
A ransomware group known as "Gunra" claimed responsibility for the attack. The group posted on the dark web that they stole 650 gigabytes of internal data from the university's servers. Gunra previously targeted other South Korean entities, including claims against the Seoul Guarantee Insurance Company.
The compromised data includes:
- Personal information of students and staff
- Internal academic records
- Administrative files
- System metadata
The number of affected individuals is not disclosed.
Inha University officials reported the incident to the Ministry of Education and the Korea Internet & Security Agency (KISA). They also filed a formal report with the Personal Information Protection Commission due to the high risk of identity theft.
Security teams are currently rebuilding the academic systems and scanning for persistent backdoors.
