Now Hacked
EN
Data breach

SSG.com API flaw exploited to expose customer names and IDs

First reported · Last reported · 17 related reports

An external attacker exploited an API vulnerability at SSG.com to access some customers’ names and internal customer identification numbers without authorization. The company detected signs of the leak on November 4, reported it to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC), and strengthened security. It did not disclose the number of affected customers.

Key facts

Affected organization
SSG.com
Incident type
Data breach
Occurred / detected
2026-11-04
Scale of damage
Names and internal customer identification numbers of some customers
Cause / method
Unauthorized access to customer information by exploiting an API vulnerability
Location
South Korea

If your data was exposed

Exposed dataName

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Detected signs of a leak of customers’ personal information.
  2. Disclosed the exposure of some customers’ names and internal customer identification numbers, and said it had reported the incident to the relevant authorities.
  3. Said it had strengthened security in response to the personal information leak.

17 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.