Data of 38,209 users leaked from furniture making and sales site
A furniture making and sales website was hit by an SQL injection attack that leaked the personal information of 38,209 users. An investigation by the Personal Information Protection Commission (PIPC) found inadequate checks and fixes for web security vulnerabilities such as input validation, as well as violations of breach notification and reporting obligations. The PIPC sanctioned two businesses for poor management of web security vulnerabilities.
Key facts
- Affected organization
- Being confirmed
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of 38,209 users
- Cause / method
- Poor management of web security vulnerabilities such as input validation, and an SQL injection attack
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The Personal Information Protection Commission (PIPC) sanctioned two businesses for poor management of web security vulnerabilities.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.