Malware on Kakao Enterprise servers leaks employee information
On 21 February 2025, malware was discovered on Kakao Enterprise's internal infrastructure servers, and a possible compromise of account information, including the email addresses and phone numbers of about 60 employees, was identified. The Personal Information Protection Commission (PIPC) launched an investigation into how the leak occurred and its scale.
Key facts
- Affected organisation
- Kakao Enterprise
- Incident type
- Data breach
- Occurred / detected
- 2025-02-21
- Scale of damage
- Possible compromise of account information, including email addresses and phone numbers, of about 60 employees
- Cause / method
- Malware infection of internal infrastructure servers
- Location
- South Korea
If your data was exposed
Exposed dataPhone numberEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Malware was discovered on internal infrastructure servers.
- It was confirmed that the Personal Information Protection Commission had launched an investigation into how the leak occurred and its scale.
2 related reports
Other incidents at Kakao Enterprise
Kakao Work hack exposes personal data and work emails of around 5,000 users
5kImpact: Personal data, work emails, attachments and other information belonging to around 5,000 users at 44 client companies
On 9 November, an external attacker gained unauthorised access to Kakao Work systems, exposing the personal data of around 5,000 users at 44 client companies. The exposed data included names, contact details, departments, email subjects and bodies, original attachments, and encrypted chat messages. The company and the Personal Information Protection Commission (PIPC) are investigating the precise scope and circumstances of the incident, and users have been advised to change their passwords and remain alert to impersonation.
Related reports: 24 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.