Personal data of about 95,000 Digital Daesung members leaked
Digital Daesung, operator of Daesung Mimac, suffered credential stuffing and bulletin-board cross-site scripting attacks that leaked the personal data of about 95,000 members. Inadequate detection and blocking of excessive login attempts, missed vulnerability checks and delayed breach notification were identified. Korea's Personal Information Protection Commission (PIPC) imposed penalties on Digital Daesung, including a fine of 613 million won.
Key facts
- Affected organisation
- Digital Daesung
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data of about 95,000 members
- Cause / method
- Credential stuffing and bulletin-board cross-site scripting attacks
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The Personal Information Protection Commission imposed penalties including a 613 million won fine on Digital Daesung for the personal data leak and breaches of its security and notification obligations.
- The leak of about 95,000 Digital Daesung members' personal data and the sanctions were reported again.
6 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.