Seoul Volunteer Center’s V-Class breach exposes data of all 29,553 members
In September 2026, personal information belonging to all 29,553 members of V-Class, the Seoul Volunteer Center’s online education platform, was leaked. The attacker exploited a vulnerability in the service provider’s system to install a web shell and steal database access privileges, and also sent spam text messages using the operator’s sender number. The operator learned of the incident through a notification from its text messaging service provider about 67 hours after the initial intrusion. The Seoul Metropolitan Government and the Seoul Volunteer Center activated a joint response framework and strengthened personal information security measures.
Key facts
- Affected organization
- Seoul Volunteer Center
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of all 29,553 members
- Cause / method
- Installation of a web shell and theft of database access privileges by exploiting a vulnerability in the service provider’s system
- Location
- South Korea
If your data was exposed
Exposed dataUsernameNameEmailPasswordPhone number
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- An administrative audit disclosed the leak of personal information belonging to all 29,553 V-Class members and the circumstances behind the roughly 67-hour delay in detection.
- The Seoul Metropolitan Government said it had activated a joint response framework with the Seoul Volunteer Center and strengthened personal information security measures.
9 related reports
- 김인제 시의원 "서울시 개인정보 관리체계 구멍 뚫렸다"
- 서울시 자원봉사자 3만 명 개인정보 유출…위탁 관리 부실 도마 위에 올라
- 김인제 서울시의원 “서울시 개인정보 관리체계 구멍 뚫려… 자원봉사자 3만명 정보 유출”
- 서울시 자원봉사 플랫폼, 개인정보 유출로 신뢰 추락
- 김인제·서울의회, 서울시 개인정보 관리체계 구멍 뚫려
- 김인제 서울시의원 “자원봉사자 3만명 개인정보 유출…서울시 위탁관리 허점 드러나”
- 서울시 자원봉사 플랫폼 2만9,553명 전원 유출... 해킹 67시간 몰랐다
- [서울시 팩트브리핑] 서울시는 서울시자원봉사센터와 공동으로 개인정보 유출사고 대응체계를 가동하여 재발방지를 위해 개인정보 보안 조치를 강화하였습니다
- 서울시자원봉사센터 플랫폼서 3만 명 개인정보 유출
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.