Now Hacked
EN
Data breach

Hack exposes data of 818 participants in ministry's Entrepreneurship for All program

First reported · Last reported · 43 related reports

SpilloverSpillover from the Amicus Lex incident · View original incident →

The names, phone numbers, and email addresses of 818 participants in the second round of the Ministry of SMEs and Startups' Entrepreneurship for All program were leaked following a hack of AI solution provider Amicus Lex. Amicus Lex detected signs of hacking in its systems on November 11. An SQL injection attack targeting the admin page was confirmed, and the company deleted vulnerable API code, blocked access from overseas IP addresses, and individually notified those affected.

Key facts

Affected organization
Ministry of SMEs and Startups
Original incident
Amicus Lex hack exposes personal data of 20,028 users
Incident type
Data breach
Occurred / detected
2026-11-11
Scale of damage
Personal information of 818 Entrepreneurship for All participants
Cause / method
SQL injection attack targeting supplier Amicus Lex's admin page
Location
South Korea

If your data was exposed

Exposed dataNamePhone numberEmail

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Amicus Lex detected signs of hacking in its systems.
  2. The Ministry of SMEs and Startups disclosed that the personal information of 818 participants in the second round of Entrepreneurship for All had been leaked.
  3. The SQL injection attack targeting the admin page and the deletion of vulnerable API code became public.

Original incident

This is spillover from the Amicus Lex incident.

  • Data breachAmicus LexKnock-on victims: 1

    Amicus Lex hack exposes personal data of 20,028 users

    20KImpact: Personal information of 20,028 LawForm users

    A hack at Amicus Lex at 5:38 a.m. on November 11 exposed the names, phone numbers, and email addresses of 20,028 LawForm users. A SQL injection attack targeting the administrator page and a vulnerable API were identified, and the vulnerable API code was deleted. The Ministry of SMEs and Startups disclosed the incident approximately 60 hours after becoming aware of it.

    Read on 헤럴드경제 ↗

43 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.