Fake payment pages on online shops steal more than 5,700 card records
More than 5,700 card records were stolen through fake payment windows inserted into some South Korean online shopping sites. The attackers induced users to enter not only card numbers, expiry dates and CVCs but also their full card PINs and resident registration numbers. The Financial Supervisory Service issued an alert about card data theft at online shopping sites.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Phishing & smishing
- Occurred / detected
- Not confirmed
- Scale of damage
- More than 5,700 card records
- Cause / method
- Fake payment windows inserted into online shopping sites to induce entry of card data and other information
- Location
- South Korea
If your data was exposed
Exposed dataNational ID numberCard detailsPassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
- Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The Financial Supervisory Service issued an alert about card data theft through fake payment windows on online shopping sites.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.