JOBIS tax platform hacked, exposing member data and triggering unauthorized charges
From November 2 to 5, an external hacker illegally accessed the JOBIS servers operated by SV Tax Firm and leaked members’ personal information, including names, mobile phone numbers, and email addresses. Personal information of corporate representatives and employees, along with salary details, card numbers, billing keys, and joint digital certificate information, was also leaked or confirmed to be potentially compromised. The operator suspended the service, canceled and refunded all 15 confirmed unauthorized charges, and took steps to revoke billing keys, block payments, and report the incident to the relevant authorities.
Key facts
- Affected organization
- SV Tax Firm
- Incident type
- Data breach
- Occurred / detected
- 2026-11-02
- Scale of damage
- Member and corporate information leaked or potentially compromised; 15 unauthorized charges
- Cause / method
- Illegal access to JOBIS servers by an external hacker
- Location
- South Korea
If your data was exposed
Exposed dataNamePhone numberEmailNational ID numberCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognize, ask the issuer to block and reissue the card.
- Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- An external hacker began illegally accessing the servers, and the access continued over several days.
- The service suspension and the cancellation and refund of all 15 confirmed unauthorized charges were confirmed.
- Steps to revoke billing keys, block payments, and report the incident to the relevant authorities were confirmed.
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.