Now Hacked
EN-GB
Data breach

Cyber-attack on JOBIS tax platform exposes member data and leads to unauthorised payments

First reported · Last reported · 3 related reports

Between 2 and 5 November, an external hacker illegally accessed the JOBIS servers run by SV Tax Firm and leaked members’ personal information, including names, mobile phone numbers and email addresses. Personal information relating to company representatives and employees, as well as salary details, card numbers, billing keys and joint digital certificate information, was also leaked or confirmed to be potentially compromised. The operator suspended the service, cancelled and refunded all 15 confirmed unauthorised payments, and took steps to revoke billing keys, block payments and report the incident to the relevant authorities.

Key facts

Affected organisation
SV Tax Firm
Incident type
Data breach
Occurred / detected
2026-11-02
Scale of damage
Member and company information leaked or potentially compromised; 15 unauthorised payments
Cause / method
Illegal access to JOBIS servers by an external hacker
Location
South Korea

If your data was exposed

Exposed dataNamePhone numberEmailNational ID numberCard details

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
  3. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. An external hacker began illegally accessing the servers, with the access continuing over several days.
  2. The suspension of the service and the cancellation and refund of all 15 confirmed unauthorised payments were confirmed.
  3. Measures to revoke billing keys, block payments and report the incident to the relevant authorities were confirmed.

3 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.