Unauthorized payments hit Gmarket amid suspected account takeover
Cases of unauthorized payments suspected to stem from account takeover occurred at Gmarket. Gmarket's CEO explained that the incidents were presumed to be account misuse unrelated to hacking. Gmarket announced full refunds of the unauthorized payment amounts and measures to strengthen security.
Key facts
- Affected organization
- Gmarket
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Losses from unauthorized payments
- Cause / method
- Presumed account takeover
- Location
- South Korea
Timeline
- Allegations of a Gmarket personal data leak and concerns about secondary damage were raised.
- Gmarket's CEO explained that the unauthorized payments were presumed to be account misuse and announced full refunds and measures to strengthen security.
7 related reports
Other incidents at Gmarket
Gmarket API flaw exploited to leak personal data and misuse e-coupons
900KImpact: 900,000 people reported as affected by the personal data leak
On October 28–29, unauthorized access exploiting a vulnerability in an external service API at Gmarket exposed customers' personal data and e-coupon PINs, and some e-coupons were used without authorization. The exposed data included names, user IDs, phone numbers, email addresses, and addresses. The company blocked the access route, reported the incident to the Korea Internet & Security Agency (KISA), and requested a police investigation; on November 1, it completed full compensation for losses from unauthorized use and payments of 10,000 won in Smile Cash to customers whose personal data was exposed, while replacement of gift certificate PINs was underway.
Related reports: 34 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.