Data of about 290,000 Neopharm and Ilhak online store members leaked
In August 2023, a hacker used an obtained administrator account to access the online store 750 times over about two weeks, viewing and downloading the information of about 290,000 members and sending about 440,000 illegal text messages. The investigation found a lack of additional authentication and access restrictions, account sharing and delayed breach notification. Neopharm and Ilhak were fined 120 million won in connection with the personal data leak.
Key facts
- Affected organization
- Neopharm
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Information of about 290,000 members viewed and downloaded; about 440,000 illegal text messages sent
- Cause / method
- Misuse of an administrator account obtained by a hacker and lack of additional authentication and access restrictions
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The 120 million won fine imposed on Neopharm and Ilhak over the personal data leak and the investigation findings were reported.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.