Now Hacked
EN-GB
Data breach

Daeguro hack exposes around 25,000 merchant bank account numbers

First reported · Last reported · 24 related reports

On 31 October, a server belonging to Daeguro operator Insung Data was hacked, exposing around 25,000 merchant bank account numbers and system login IDs and passwords for around 250 current and former employees. Suspecting that the merchant registration processing system was the entry point, the operator suspended new applications and reported the incident to the police and the Korea Internet & Security Agency (KISA). Merchants were notified four days after the incident. Indications also emerged that funds had been withdrawn from the operator’s corporate bank account, but no connection to the hack was confirmed.

Key facts

Affected organisation
Insung Data
Incident type
Data breach
Occurred / detected
2026-10-31
Scale of damage
Around 25,000 merchant bank account numbers and login IDs and passwords for around 250 current and former employees exposed
Cause / method
External intrusion into a server, with the merchant registration processing system suspected as the entry point
Location
South Korea

If your data was exposed

Exposed dataBank accountUsernamePassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. An external intrusion occurred on the Daeguro operator’s server.
  2. The operator announced its security incident response and investigation and notified merchants of the incident.
  3. The exposure of bank account numbers and employee login credentials, along with the suspension of new merchant registrations, became known, and police began investigating through server and log analysis.
  4. Following the incident, the Daegu city government launched special cyber security inspections of public institutions.
  5. The Economy and Environment Committee of the Daegu Metropolitan Council called for a review of Daeguro’s operations and measures to address the damage caused by the hack.

24 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.