Now Hacked
EN-GB
Data breach

Woori Card leaks personal data of around 207,000 merchant representatives

First reported · Last reported · 17 related reports

Employees at Woori Card's Incheon Sales Centre accessed and extracted merchant representatives' personal information and distributed it to credit card sales agents. The information leaked between January and April 2024 was used to recruit new customers, and Woori Card apologised after the incident was detected through an internal control channel. Initially reported as approximately 75,000 records, the scale was stated as around 207,000 people during sanction proceedings in November 2026.

Key facts

Affected organisation
Woori Card
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal information of around 207,000 merchant representatives
Cause / method
Sales centre employees' unauthorised access to and extraction of personal information, its transfer to credit card sales agents, and inadequate management of access and download permissions
Location
South Korea

If your data was exposed

Exposed dataNamePhone number

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Woori Card apologised for the leak of approximately 75,000 records of merchant representatives' personal information.
  2. The Personal Information Protection Commission (PIPC) confirmed the transfer of information on 75,676 people and deficiencies in internal controls, and imposed an administrative fine of KRW 13.451 billion.
  3. Woori Card strengthened internal controls by placing its Information Security Division under the chief compliance officer.
  4. The Financial Supervisory Service proceeded with sanction proceedings over the access to and extraction of personal information of around 207,000 merchant representatives.

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.