[theqoo] HYBE ALSO EXPERIENCES DATA LEAK, INCLUDING BANK ACCOUNTS, PASSPORTS, CREDIT CARDS, ID NUMBERS, EVEN MEDICAL INFORMATION

It has recently come to light that HYBE, the largest music entertainment company in South Korea, suffered a security breach, resulting in the exposure of personal information belonging to current and former employees, as well as individuals from partner companies. The leaked data includes sensitive information such as resident registration numbers, credit card numbers, and medical records, raising significant concerns regarding the company’s information security management.

According to a notice titled "Apology and Information Regarding a Personal Data Breach," posted on HYBE’s official website on the 18th of last month, the company discovered unauthorized external access during an internal security review. The breach occurred via a document preview solution, provided by an external vendor and integrated into HYBE’s electronic approval system. Further investigation revealed similar unauthorized access within the company’s expense processing system. HYBE has determined that, as a result of these incidents, certain internal documents and personal information stored within these two systems were compromised.

The personal data breaches occurred on two separate occasions: from 1:16 PM on September 12 to 11:14 AM the following day, and from 10:41 PM on October 3 to 3:05 PM on October 5. The compromised data includes names, resident registration numbers, foreign national registration numbers, passport numbers, bank account numbers, credit card numbers, mobile phone numbers, email addresses, physical addresses, medical information, dates of birth, IP addresses, employee identification numbers, and department affiliations. The specific data points leaked vary by individual, and the total number of affected persons and the full scale of the breach have not been disclosed.

HYBE stated that it has implemented security measures to prevent further leaks, including blocking the IP addresses and access paths used in the external attack. The company has reported the incident to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission, and is in the process of notifying the affected individuals directly.

HYBE stated, "We deeply apologize for the concern caused by this personal data breach," adding, "We will further strengthen access controls and security monitoring within our internal systems, conduct a thorough investigation into the root cause, and improve our security framework to ensure that similar incidents do not recur." The company further noted that, as of now, there have been no reports of the leaked personal information being misused. Additionally, HYBE advised that those affected by this incident may seek compensation for damages—including statutory damages—under the Personal Information Protection Act, or file a request for dispute resolution with the Personal Information Dispute Mediation Committee.

This is not the first time HYBE has experienced a personal data breach. Previously, a data leak occurred on Weverse, a fan platform operated by HYBE subsidiary Weverse Company. On September 6, Weverse Company announced that data associated with 422,584 user accounts had been compromised. The leaked information included internal user identification numbers, payment methods, transaction and cancellation amounts, as well as the dates and times of purchases and refunds. At the time, Weverse Company explained that it had identified a security vulnerability following an external report, subsequently strengthening its access controls and notifying the relevant authorities.

(...)

original post: here

1. HYBE, are you guys using Douzone (T/N: Korean IT company that deals with enterprise resource planning (ERP) systems.) too...? My company just sent out a notice about this today, too... ㅜㅜ

2. So the employees’ data got leaked too (I wonder if the artists’ data was compromised too?)

Seriously, we might as well just reset the personal data of the entire nation

3. No wonder the details were so specific, it’s because the employees’ data was leaked. Aigo...

4. Employees, partner companies, and even the artists, everything must have been leaked

5. At this point, I’m starting to think that the personal information of South Koreans has become a "public good" for the whole world

6. I feel like there’s nowhere left that hasn’t been hacked yet. I work at a public institution, and I’m terrified that we might be next...

7. This is insane.

8. These days, they use AI agents to carry out these hacksㅋㅋ they just probe everywhere, looking for any weak spots

9. I bet these f*ckers will not properly apologize or offer any type of compensation either

10. The fans' information should be safe, right? Or was it just their own data that got compromised?

New post

Next Post

✉ PC Stories