Seoul Volunteer Center’s V-Class breach exposes all 29,553 members’ data
In September 2026, the personal information of all 29,553 members of V-Class, the Seoul Volunteer Center’s online education platform, was leaked. The attacker exploited a vulnerability in the service provider’s system to install a web shell and steal database access privileges, and also sent spam text messages using the operator’s sender number. The operator became aware of the incident following notification from its text messaging service provider approximately 67 hours after the initial intrusion. The Seoul Metropolitan Government and the Seoul Volunteer Center activated a joint response framework and strengthened personal information security measures.
Key facts
- Affected organisation
- Seoul Volunteer Center
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of all 29,553 members
- Cause / method
- Installation of a web shell and theft of database access privileges through a vulnerability in the service provider’s system
- Location
- South Korea
If your data was exposed
Exposed dataUsernameNameEmailPasswordPhone number
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.
Timeline
- An administrative audit revealed the leak of all 29,553 V-Class members’ personal information and the circumstances of the approximately 67-hour detection delay.
- The Seoul Metropolitan Government said it had activated a joint response framework with the Seoul Volunteer Center and strengthened personal information security measures.
9 related reports
- 김인제 시의원 "서울시 개인정보 관리체계 구멍 뚫렸다"
- 서울시 자원봉사자 3만 명 개인정보 유출…위탁 관리 부실 도마 위에 올라
- 김인제 서울시의원 “서울시 개인정보 관리체계 구멍 뚫려… 자원봉사자 3만명 정보 유출”
- 서울시 자원봉사 플랫폼, 개인정보 유출로 신뢰 추락
- 김인제·서울의회, 서울시 개인정보 관리체계 구멍 뚫려
- 김인제 서울시의원 “자원봉사자 3만명 개인정보 유출…서울시 위탁관리 허점 드러나”
- 서울시 자원봉사 플랫폼 2만9,553명 전원 유출... 해킹 67시간 몰랐다
- [서울시 팩트브리핑] 서울시는 서울시자원봉사센터와 공동으로 개인정보 유출사고 대응체계를 가동하여 재발방지를 위해 개인정보 보안 조치를 강화하였습니다
- 서울시자원봉사센터 플랫폼서 3만 명 개인정보 유출
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.