Black Yak website hack leaks data of over 340,000 customers
On March 4, 2025, a hack of Black Yak's website leaked the names, genders, dates of birth, mobile phone numbers and trailing portions of addresses of 342,253 customers. The company blocked the attacking IPs and proxy access IPs and patched vulnerabilities in its website. An investigation found that an administrator account had been taken over through an SQL injection attack, and a fine of 1.391 billion won was imposed for inadequate security measures.
Key facts
- Affected organization
- Black Yak
- Incident type
- Data breach
- Occurred / detected
- 2025-03-04
- Scale of damage
- Names, genders, dates of birth, mobile phone numbers and trailing portions of addresses of 342,253 customers
- Cause / method
- Administrator account takeover via SQL injection attack and inadequate security measures
- Location
- South Korea
If your data was exposed
Exposed dataNamePhone numberAddressDate of birth
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- Personal information of 342,253 customers was leaked in a website hack.
- It was disclosed that the company had blocked the attacking IPs and proxy access IPs and patched website vulnerabilities.
- Investigation findings on the SQL injection attack and inadequate security measures were released, and a fine of 1.391 billion won was imposed.
11 related reports
- 이번엔 블랙야크까지…유통가 '개인정보 불감증' 심각
- 블랙야크, 해킹에 고객정보 34만건 유출
- '블랙야크' 보안 뚫렸다...개인정보 34만 건 유출
- 블랙야크, 약 34만2253명 개인정보 유출
- 또야? 이번엔 블랙야크서 34만여건 고객 정보 유출
- 블랙야크 해킹당해 개인정보 34만건 유출…과징금 13억9천만원
- '개인정보 유출' 블랙야크·토픽교육센터 총 과징금 14억 제재
- 흔한 해킹수법에 당해 34만명 개인정보 유출한 ‘블랙야크’…14억 과징금
- ‘블랙야크’ 34만 명 이용자 정보 유출…과징금 13억 여원
- Black Yak faces 1.391 billion won penalty after massive data breach
- Black Yak, Korea TOPIK Fined Over Data Breaches
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.