LG Energy Solution Data Breach May Have Exposed 1.7TB of Employee Records and SQL Data

Published
Written by:
Lore Apostol
Lore Apostol
Cybersecurity Writer

Key Takeaways

The Akira hacking group has asserted that it breached LG Energy Solution's network, a prominent South Korean manufacturer of lithium-ion batteries. In a claim made on November 17, 2025, the cybercrime organization stated that it had exfiltrated 1.67 terabytes of sensitive corporate data. 

The claims, which are pending verification, suggest a comprehensive compromise of the company’s internal systems.

Details of the Alleged Confidential Data Exfiltration

According to the Akira hacking group, the stolen dataset is extensive and highly sensitive. The group specified that the exfiltrated files include 46 GB of five SQL databases containing employee personal information. 

Akira claimed LG Energy Solution
Akira claimed LG Energy Solution | Source: HackManac on X

Furthermore, the haul allegedly comprises a wide array of confidential corporate materials, such as:

Details pertaining to the company’s partners and clients were also reportedly compromised, indicating a significant risk of third-party data exposure:

What Does LG Energy Solution Do?

LGES is one of the world’s largest battery makers for products for IT devices, home appliances, and LEVs (Light Electric Vehicles). It is placed alongside CATL, Panasonic, SK Innovation, and Samsung SDI.

Implications for the Manufacturing Sector

This alleged LG Energy Solution data breach underscores the vulnerability of high-value manufacturing and technology firms to sophisticated cyberattacks.  

LG Energy Solution notified authorities about a former researcher reportedly stealing proprietary technology for Ola Electric, South Korean media outlets reported, cited by ACKO Drive. On November 9, the latter denied battery technology leak allegations

The manufacturing sector remains a prime target for cybercrime due to its valuable intellectual property and complex supply chains, with ransomware attacks endangering 50% of critical industries, underscoring the need for robust cybersecurity defenses.

A report last month highlighted that the Adaptix framework is exploited by cybercriminals with Russian ties, including Akira.


For a better user experience we recommend using a more modern browser. We support the latest version of the following browsers: For a better user experience we recommend using the latest version of the following browsers: