KR — ZDNet Korea
Pharma Firm Loses ₩15 Billion Despite Backups; Everyzone Says Ransomware Must Be Stopped at the Endpoint
Security2 min read
Everyz, a Korean security company, says ransomware (a virus that locks files and asks for money) now steals data too, so companies must stop it on each device, not just rely on backups. The company made this point at a conference on defense technology security.
What happened
Kim Jun-young, a head of strategy at Everyz, spoke at a defense tech security conference on the 23rd. He said that a ransomware infection now means personal and secret data can leak. He urged defense companies to use security that stops both data theft and work stoppages.
Key numbers
- Ransomware reports in Korea rose 40.5%, from 195 in 2024 to 274 in 2025, according to KISA (Korea Internet & Security Agency).
- One drug maker's order and shipping systems were down for two weeks.
- A SGI Seoul Guarantee company stopped work for 4 days.
- About 20 small and mid-sized hospitals were infected by the same ransomware at once.
- One drug maker lost nearly 15 billion won (about $11 million) after it was hit again in 2023.
Background
Ransomware attacks often start with fake emails, stolen remote access accounts, or attacks on web and database servers. Everyz says AI makes these attacks faster and more convincing, and that criminal groups now split up tasks and even run call centers to negotiate. A drug maker in the story was hit in 2022, then bought backup software. It was hit again the next year. Its restore took about 7 days. In 2023 it adopted Everyz's White Defender, which stops encryption by watching how files are changed, instead of matching known virus signatures. The product also keeps a safe copy of files so they can be restored after a block.
Why it matters
Backups can bring data back, but they cannot stop lost work, lost money, or leaked secrets. Defense firms and other companies face higher risk because new privacy rules also count altered or damaged personal data as a breach. Stopping attacks on each device may become a key part of security plans.
What to watch
- Whether ransomware reports in 2026 pass the 2025 total, as Everyz expects.
- How the amended Personal Information Protection Act (in force since September 11) is enforced.
- Whether more companies choose device-level protection in addition to backups.
Glossary
- Everyz
- A Korean security company that makes White Defender, a tool that blocks ransomware on devices.
- White Defender
- Everyz's product that stops file encryption by watching file behavior and keeps safe copies for restore.
- Ransomware
- A type of malware that locks or steals files and demands payment to release them.
- KISA
- Korea Internet & Security Agency, a government group that works on internet and cyber security.