Malware on Kakao Enterprise servers leaks employee information
On February 21, 2025, malware was discovered on Kakao Enterprise's internal infrastructure servers, and a possible compromise of account information, including the email addresses and phone numbers of about 60 employees, was identified. The Personal Information Protection Commission (PIPC) launched an investigation into how the leak occurred and its scale.
Key facts
- Affected organization
- Kakao Enterprise
- Incident type
- Data breach
- Occurred / detected
- 2025-02-21
- Scale of damage
- Possible compromise of account information, including email addresses and phone numbers, of about 60 employees
- Cause / method
- Malware infection of internal infrastructure servers
- Location
- South Korea
If your data was exposed
Exposed dataPhone numberEmail
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- Malware was discovered on internal infrastructure servers.
- It was confirmed that the Personal Information Protection Commission had launched an investigation into how the leak occurred and its scale.
2 related reports
Other incidents at Kakao Enterprise
Kakao Work hack exposes personal data and work emails of about 5,000 users
5KImpact: Personal data, work emails, attachments, and other information belonging to about 5,000 users at 44 client companies
On November 9, an external attacker gained unauthorized access to Kakao Work systems, exposing the personal data of about 5,000 users at 44 client companies. The exposed data included names, contact details, departments, email subjects and bodies, original attachments, and encrypted chat messages. The company and the Personal Information Protection Commission (PIPC) are investigating the exact scope and circumstances of the incident, and users have been advised to change their passwords and watch out for impersonation.
Related reports: 24 →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.