GS Engineering & Construction has notified residents that an apartment community-facility reservation system used at some of its developments was accessed without authorization, potentially exposing personal information. The intrusion occurred on October 28 between approximately 10:15 p.m. and 11:29 p.m., according to reports citing the company’s notice to customers.
The information potentially affected varies by user. It may include names, nicknames, dates of birth, mobile phone numbers, gender, email and home addresses, membership details, housing status, passwords, administrator IDs, head-of-household status, registration times, last-login IP addresses and RF card numbers used for building access. The company said the system did not collect national identification numbers, bank account details or payment card numbers, so those categories were not part of the incident.
- Unauthorized access window
- October 28, approximately 10:15 p.m. to 11:29 p.m.
- Potentially affected data
- Personal profiles, passwords, login records and RF card numbers
- Excluded categories
- National identification numbers, bank accounts and payment card numbers
GS Engineering & Construction said it blocked the external IP address after identifying suspicious access, applied security measures and reported the incident to the relevant authorities. The reservation platform’s role in storing resident profiles and access-related records meant that a breach of that system could place several types of data at risk at once. The available evidence does not establish that every listed field was taken from every account or that the exposed information has been misused.
Affected complexes and residents remain unidentified
The company is investigating which apartment complexes and individual customers were affected, as well as the precise information involved. No verified figure for the number of residents or complexes exposed was available in the reports. GS Engineering & Construction said it would provide instructions for checking individual exposure after the investigation and prepare additional security and recurrence-prevention measures.
Residents therefore face uncertainty not only about ordinary contact and account information, but also about passwords and RF card identifiers associated with residential services and entry systems. The reports do not confirm unauthorized entry, financial loss or other secondary damage. The next material disclosure will be the company’s customer-by-customer findings, including the affected complexes, the number of people involved and whether access credentials require replacement or other protective action.