Now Hacked
EN
Data breach

Malware on Duo Employee PC Leaks Data of 427,464 Members

First reported · Last reported · 64 related reports

In January 2025, a Duo employee's work PC was infected with malware, leaking the personal data of 427,464 full members. The leaked data included resident registration numbers, education, religion, physical information, marital history and family relations. Duo was fined about 1.2 billion won for delays in reporting the leak and failing to notify victims, and police investigations and damages lawsuits by victims followed.

Key facts

Affected organization
Duo
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Personal data of 427,464 full members
Cause / method
Malware infection of an employee's work PC
Location
South Korea

If your data was exposed

Check if my data was leaked ↗

Exposed dataNational ID number

  1. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.

Timeline

  1. The leak of members' personal data through the Duo hack became known.
  2. The leak of personal data of 427,464 full members and the imposition of a fine of about 1.2 billion won were disclosed, and a police investigation proceeded.
  3. The number of participants in the class action over the personal data leak grew to the 500s.
  4. Victims of the personal data leak filed a damages lawsuit.
  5. An additional damages lawsuit was filed against Duo.
  6. CEO Park Su-kyung apologized at the National Assembly audit for the damage caused by the personal data leak.

64 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.