Now Hacked
EN
Data breach

Toss Payments Merchant Credentials Exposed, Payment Records Accessed

First reported · Last reported · 11 related reports

An incident occurred in which authentication credentials, including an integration key, of one Toss Payments merchant were exposed and payment records were accessed. Toss Payments said the information accessed was at the level of receipts and that claims of a hack of its own systems or a leak of tens of thousands of records were untrue. The Financial Supervisory Service launched an on-site inspection of Toss Payments.

Key facts

Affected organization
Toss Payments
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
Payment records of one merchant accessed
Cause / method
Exposure of merchant authentication credentials including an integration key
Location
South Korea

If your data was exposed

Exposed dataUsage & purchase history

  1. Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Timeline

  1. Toss Payments explained the incident in which exposed merchant credentials led to payment records being accessed, and denied a hack or a leak of tens of thousands of records.
  2. The Financial Supervisory Service launched an on-site inspection of Toss Payments.

11 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.