Now Hacked
EN-GB
Data breach

GS Retail leaks personal data of 1.66 million customers

First reported · Last reported · 32 related reports

GS Retail was hit by a credential stuffing attack that leaked customers' personal information. The damage was initially reported at about 90,000 people, but further leaks at GS SHOP emerged, and the confirmed scale was later 1.66 million people. GS Retail apologised and launched a task force with management participation, and the Personal Information Protection Commission imposed a fine of 12.836 billion won.

Key facts

Affected organisation
GS Retail
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal data of 1.66 million customers
Cause / method
Credential stuffing attack
Location
South Korea

If your data was exposed

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. The leak of personal data of about 90,000 GS Retail customers came to light.
  2. It emerged that a credential stuffing attack was used in the personal data leak.
  3. A further leak of about 1.58 million personal data records at GS SHOP came to light, and GS Retail apologised and launched a task force with management participation.
  4. The Personal Information Protection Commission fined GS Retail over the leak of personal data of 1.66 million customers.

32 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.