HotelsCombined leaks personal data of 1,246 South Korean users
A hacker who hijacked a HotelsCombined account through phishing exploited a flaw in its permissions design to view and leak the personal information of 1,246 South Korean users. The leaked information included names, email addresses, hotel reservation details and card information. The Personal Information Protection Commission (PIPC) imposed a penalty surcharge of 94.5 million won and a fine of 16 million won for violations of safety measure and breach notification and reporting obligations.
Key facts
- Affected organization
- HotelsCombined
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Names, email addresses, hotel reservation details and card information of 1,246 South Korean users
- Cause / method
- Personal information viewed and leaked using an account hijacked through phishing and a flaw in permissions design
- Location
- South Korea
If your data was exposed
Exposed dataNameEmailCard detailsUsage & purchase history
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- It emerged that HotelsCombined had been hit with a penalty surcharge of 94.5 million won and a fine of 16 million won over the leak of personal information of 1,246 South Korean users.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.