Unauthorised payments hit Gmarket amid suspected account takeover
Cases of unauthorised payments suspected to stem from account takeover occurred at Gmarket. Gmarket's CEO explained that the incidents were presumed to be account misuse unrelated to hacking. Gmarket announced full refunds of the unauthorised payment amounts and measures to strengthen security.
Key facts
- Affected organisation
- Gmarket
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Losses from unauthorised payments
- Cause / method
- Presumed account takeover
- Location
- South Korea
Timeline
- Allegations of a Gmarket personal data leak and concerns about secondary damage were raised.
- Gmarket's CEO explained that the unauthorised payments were presumed to be account misuse and announced full refunds and measures to strengthen security.
7 related reports
Other incidents at Gmarket
Gmarket API flaw exploited to leak personal data and misuse e-coupons
900kImpact: 900,000 people reported as affected by the personal data leak
On 28–29 October, unauthorised access exploiting a vulnerability in an external service API at Gmarket exposed customers' personal data and e-coupon PINs, and some e-coupons were used without authorisation. The exposed data included names, user IDs, phone numbers, email addresses and addresses. The company blocked the access route, reported the incident to the Korea Internet & Security Agency (KISA) and requested a police investigation; on 1 November, it completed full compensation for losses from unauthorised use and payments of 10,000 won in Smile Cash to customers whose personal data was exposed, while replacement of gift voucher PINs was underway.
Related reports: 34 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.