Now Hacked
EN
Data breach

HYBE hack exposes employee and partner personal data

First reported · Last reported · 36 related reports

Unauthorized access to HYBE’s internal systems occurred on two occasions, September 12–13 and October 3–5, exposing internal documents and personal information belonging to some current and former personnel and partner company representatives. Evidence of intrusion through an external document preview solution linked to the electronic approval system and through the expense processing system was confirmed, and the exposed information included resident registration numbers, passport numbers, bank account numbers, card numbers, and medical information. HYBE apologized, and police launched a preliminary inquiry on November 3.

Key facts

Affected organization
HYBE
Incident type
Data breach
Occurred / detected
2026-09-12
Scale of damage
Personal information belonging to some current and former personnel and partner company representatives, as well as internal documents
Cause / method
Unauthorized access through an external document preview solution and the expense processing system
Location
South Korea

If your data was exposed

Exposed dataNational ID numberBank accountCard detailsHealth & medical data

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
  3. Turn on deposit and withdrawal alerts in your banking app. You can check all accounts in your name at once and request a payment suspension if needed.Account Info (integrated account management) ↗
  4. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  5. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Unauthorized access to internal systems resulted in a personal data breach.
  2. A second personal data breach occurred.
  3. HYBE disclosed the breach of internal documents and personal information and apologized.
  4. The Gyeonggi Nambu Provincial Police Agency launched a preliminary inquiry into the circumstances of the personal data breach and whether an external intrusion had occurred.

36 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.