Now Hacked
EN-GB
Data breach

SSG.com API vulnerability exploited to expose customer names and IDs

First reported · Last reported · 17 related reports

An external attacker exploited an API vulnerability at SSG.com to view some customers’ names and internal customer identification numbers without authorisation. The company identified signs of the leak on 4 November, reported it to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC), and took steps to strengthen security. It did not disclose how many customers were affected.

Key facts

Affected organisation
SSG.com
Incident type
Data breach
Occurred / detected
2026-11-04
Scale of damage
Names and internal customer identification numbers of some customers
Cause / method
Unauthorised access to customer information through exploitation of an API vulnerability
Location
South Korea

If your data was exposed

Exposed dataName

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Identified signs of a leak of customers’ personal information.
  2. Disclosed the exposure of some customers’ names and internal customer identification numbers, and confirmed that it had notified the relevant authorities.
  3. Said it had taken steps to strengthen security following the personal information leak.

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.