Now Hacked
EN-GB
Data breach

SM Entertainment business systems hacked, exposing employee data

First reported · Last reported · 17 related reports

SM Entertainment confirmed on 4 November that an external attacker had gained unauthorised access to its business systems and exfiltrated documents. The exposed information included executives' and employees' resident registration numbers, bank account numbers, mobile phone numbers, addresses and contract information. The company apologised and is investigating the exact scale of the damage.

Key facts

Affected organisation
SM Entertainment
Incident type
Data breach
Occurred / detected
2026-11-04
Scale of damage
Personal information of executives and employees and internal documents, including contracts, leaked; scale under investigation
Cause / method
An external attacker gained unauthorised access to business systems, including the electronic approval system, and exfiltrated documents
Location
South Korea

If your data was exposed

Exposed dataNational ID numberBank accountPhone numberAddress

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  3. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. SM Entertainment confirmed that an external attacker had gained unauthorised access to its business systems and exfiltrated documents.
  2. SM Entertainment apologised for the leak of executives' and employees' personal information and said it was investigating the scale of the damage.

Also affected by this incident

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.