South Korea
5 articles with this tag
Unauthorized Access to Bithumb's Internal Groupware (Personal Data of 844 Customers Exposed): ID Numbers, Account Numbers and More, and What Customers Should Do
Bithumb, a crypto exchange in South Korea, discovered abnormal access by an unauthorized outside party to its internal mobile groupware system on October 27, 2026 and, according to Korean press reports of its announcement on October 29, found that customer personal data was exposed. Of 6,444 customers' records involved, 5,600 were in DRM-encrypted files that could not be read from outside, and 844 customers' data was exposed. The items vary by customer and include name, mobile number, email address, resident registration number, driver's license number, account number and ID card copies. 715 employees were also affected. Bithumb says the groupware is separate from exchange accounts and asset information, and no direct intrusion into the exchange service or customer database has been confirmed. This site's conclusion: treat any call, text or email that mentions your ID or account details as suspect, never share a one-time code or password, and check Bithumb's notice in the official app or site you open yourself.
Unauthorized Access at the Reservation System Vendor of JAL, JTA, ANA, Korean Air and Asiana (About 92,000 JAL/JTA and 37,800 ANA Customers): Booking Numbers, Names and More, and What Travellers Should Do
Japan Airlines (JAL) and Japan Transocean Air (JTA) announced on October 28, 2026 that on October 23 they were told by the vendor of their passenger service system, an overseas company, that unauthorized access to the vendor's systems left traces of some booking information being viewed from outside. The period is August 10, 2023 to September 23, 2026. About 90,000 people had booking number, name, boarding date, route and cabin class involved; about 2,000 people also had email address, phone number, passport number, nationality, mileage number, ticket number, seat number and more viewed. The total is about 92,000 people. On October 30 JAL and JTA updated the notice to say they had contacted those customers at the email address given when booking. All Nippon Airways (ANA) announced on October 30 that there are traces of some booking information of about 37,800 people who booked in the same period being viewed (about 1,700 of them including passport and mileage numbers). In South Korea, Korean Air and Asiana Airlines announced on October 23 that there are signs that some customers' booking numbers leaked from the same company's reservation system; they say it was caused by unauthorized access using login credentials and is estimated to have occurred between August 2023 and September 2026 (neither has published a number). JAL, JTA and ANA say credit card details and passwords were not included. According to press reports, 144,249 passengers of Norwegian and Widerøe (a figure from a letter Norwegian sent to Norway's data protection authority) and about 350,000 SAS passengers (a figure SAS reportedly filed with Swedish authorities) are also part of the same vendor incident; these are press reports, not airline announcements. In a statement the vendor says it implemented measures to fix a vulnerability affecting a booking-display environment and enhanced monitoring and detection (its investigations continue), and has no evidence payment or financial data was accessed. This site's conclusion: even if a message claiming to be from an airline gets your booking number, name and flight right, do not use its links or numbers; check in the official app or site. If your passport or mileage number may be involved, change your mileage account password and review its redemption history.
Breaches at 7 Korean financial institutions (Shinhan Bank reports about 25,000 customers): income, loan limits and resident registration numbers leaked — what customers should do
Between October 1 and 4, 2026, seven South Korean financial institutions announced or reported data leaks caused by unauthorized outside access. Customer data: Shinhan Bank about 25,000 people (name, phone number, annual income, loan limit and more; resident registration numbers in 66 cases), KB Kookmin Bank 119 people (incl. encrypted resident registration numbers), Hana Bank 89 people (seven items incl. resident registration number), Yegaram Savings Bank about 40,000 people (estimate). According to reports, Welcome Savings Bank leaked up to about 2,200 records (estimate) on contact persons at corporate clients, Hyundai Capital leaked data on 146 mortgage loan agents (incl. resident registration numbers), and BNK Busan Bank leaked data on 11 staff of an outside development contractor. On October 4, President Lee Jae-myung ordered a thorough investigation, and regulators asked about 500 financial institutions for emergency checks. The same day, the chairman of the Financial Services Commission reportedly said AI-assisted attacks could not be ruled out; this is not a confirmed cause. Police reportedly opened a formal investigation on October 5, and the Financial Services Commission issued a consumer alert (caution level) on October 6. No common cause has been officially confirmed. This site's take: a caller who knows your real income or loan limit is not proof the call comes from your bank. Hang up and call back on the main number you look up yourself.
CHAEVI EV-Charging App Data Breach (298,000 Records): What Leaked and What Users Should Do
According to CHAEVI's notices of July 26 and July 30, 2026, an illegal external hacking attack on July 23 leaked a total of 298,333 personal data records: 164,858 email-only, 131,411 email plus password (encrypted), 1,235 email plus name and contact number (encrypted), gender, date of birth and more, and 829 with all of that plus the password (encrypted). CHAEVI says it does not collect or hold resident registration numbers, passport numbers, or card and account numbers, so none were leaked, and that while investigating it also found a separate leak from around January 2025, which is still under investigation. Charging history and location do not appear in the notices' list of leaked items. What scammers can most easily use is the email address, leaked unencrypted in every record, plus the fact that its owner uses an EV-charging app. Ignore emails and texts about charging fees, unpaid balances or compensation by default, and change your password starting with every other service where you reused it.
TVING Data Breach (South Korea): Fake Compensation Messages and What Users Should Do
According to the investigation results published on September 3, 2026 by South Korea's Ministry of Science and ICT and its joint public-private investigation team, the TVING breach exposed data on 39.54 million accounts (active, dormant, withdrawn and test accounts, including duplicates). The 20 leaked item types (70 fields) include ID, name, date of birth, connecting information (CI), duplicate-registration information (DI), refund account numbers (encrypted) and passwords (one-way encrypted); passwords were confirmed to be impossible to decrypt. This site's take: because TVING is genuinely running a compensation program, fake 'compensation' and 'refund' texts are the most convincing scam right now. Check compensation only inside the official app you open yourself, change passwords wherever you reused them, and turn on identity-theft alerts if you live in Korea. For developers, the lesson is structural: one developer's access key opened all the source code, and that source code contained production-environment keys.