Now Hacked
EN
Data breach

Gowid hack exposes client data and triggers fraudulent corporate card charges

First reported · Last reported · 15 related reports

Gowid's Google Workspace subscription billing and payment functionality was compromised, exposing client contacts' personal information, billing information, partially masked card numbers, and bank account information belonging to some subscribers. The attacker exploited an API without authentication to take over an administrator account and create fraudulent invoices in an attempt to charge corporate cards, affecting 656 client companies. Approved payments resulted in no actual financial losses thanks to suspicious transaction blocking and full reversals, and Gowid reported the security incident and investigated the attack path.

Key facts

Affected organization
Gowid
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
656 client companies affected; contacts' personal information, billing information, partial card numbers, and bank account information exposed; no actual financial losses
Cause / method
Exploitation of an API without authentication and takeover of an administrator account to create fraudulent invoices
Location
South Korea

If your data was exposed

Exposed dataPhone numberCard detailsBank account

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
  3. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  4. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. The leak of Gowid customer information and irregular Google Workspace subscription charges became public, and the company reported the security incident.
  2. Irregular charges totaling approximately KRW 3 million and a method of creating fraudulent electronic documents using stolen administrator information came to light; all approved payments were reversed in full.
  3. The number of affected client companies was determined to be 656, and exploitation of an API without authentication and the exposure of some subscribers' bank account information were confirmed.

15 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.