Now Hacked
EN-GB
Data breach

KOMSCO Chak platform exposes personal data of 3,083 users

First reported · Last reported · 14 related reports

An unauthorised external party accessed Chak, KOMSCO’s mobile platform for local gift certificates, and viewed the personal information of 3,083 users. The exposed information varied by individual and included some of the following: names, dates of birth, mobile phone numbers, bank account numbers, connecting information (CI), email addresses and encrypted card numbers. KOMSCO blocked access from the attacker’s IP address and overseas IP addresses and is investigating the intrusion route and any additional harm.

Key facts

Affected organisation
Korea Minting, Security Printing & ID Card Operating Corporation (KOMSCO)
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal information of 3,083 users
Cause / method
An unauthorised external party accessed the platform and viewed personal information
Location
South Korea

If your data was exposed

Exposed dataNameDate of birthPhone numberBank accountEmailCard details

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
  2. Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
  3. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. KOMSCO disclosed that the personal information of 3,083 Chak users had been viewed and exposed.
  2. It was reported that access from the attacker’s IP address and overseas IP addresses had been blocked and that investigations into the intrusion route and any additional harm were ongoing.

14 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.