Now Hacked
EN
Data breach

Stibee server hack leaks members' personal and credit information

First reported · Last reported · 13 related reports

On December 17, 2024, the servers of newsletter platform Stibee were hacked, leaking members' names, email addresses and encrypted passwords, as well as some members' credit information. The incident also led to spam emails impersonating South Korea's Ministry of Foreign Affairs. Stibee announced follow-up measures including blocking the illegal access route, introducing two-factor authentication and destroying temporarily retained credit information, and the Personal Information Protection Commission (PIPC) launched an investigation.

Key facts

Affected organization
Stibee
Incident type
Data breach
Occurred / detected
2024-12-17
Scale of damage
Members' names, email addresses and encrypted passwords, and some members' credit information
Cause / method
Server hacking
Location
South Korea

If your data was exposed

Exposed dataNameEmailPassword

  1. Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
  2. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  3. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Stibee's servers were hacked, leaking members' personal information and some members' credit information.
  2. It came to light that spam emails impersonating the Ministry of Foreign Affairs originated from the Stibee hack.
  3. Stibee apologized and announced follow-up measures including blocking the illegal access route, introducing two-factor authentication and destroying retained credit information.
  4. The Personal Information Protection Commission (PIPC) launched an investigation into the Stibee personal data leak.

13 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.