Papa John's Korea security incident history
Hacking, data breaches and other security incidents involving Papa John's Korea, with related coverage.
Papa John's Korea order page exposes customer personal data
37mImpact: Possible leak of about 37 million customer records from the past nine years
It was found that changing a number in the URL of Papa John's Korea's order page exposed other customers' order histories and personal information without login or authentication. Concerns were raised that about 37 million customer records from the past nine years, including names, addresses and card numbers, may have been leaked. It emerged that the company had become aware of the problem in July 2024 but had not reported it to the Korea Internet & Security Agency (KISA), and the Personal Information Protection Commission (PIPC) launched an investigation.
Related reports: 9 · last report →