Merck service error exposes personal data of up to 108 people
An error in Merck's new medication record management service exposed the personal information of up to 108 people to other users. An investigation found a problem in which different users accessing the service were treated as the same person, as well as a delay in notifying the leak. A penalty surcharge of 80 million won and an administrative fine were imposed for negligent data protection and late notification.
Key facts
- Affected organisation
- Merck
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of up to 108 people
- Cause / method
- Error in the new service that treated different users as the same person
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- It came to light that a penalty surcharge of 80 million won and an administrative fine had been imposed on Merck over the exposure of personal information and delayed notification.
1 related reports
Other incidents at Merck
Merck data breach exposes financial account information
Impact: Financial account information exposed
A data breach at Merck exposed financial account information. The scale of the damage, the date of the incident, the cause of the leak and the response have not been confirmed.
Read on Claim Depot ↗Merck hit by 2017 NotPetya cyber-attack
Merck was hit by the NotPetya cyber-attack in 2017. It later fought its insurers over a $1.4 billion insurance claim, and a settlement was reported in January 2024. The company also strengthened its cyber security strategy after the attack.
Related reports: 3 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.