Hyundai Ezwel member information lookup API hack leaks customer personal data
At Hyundai Ezwel, an external attacker abnormally accessed the API used to look up member information, leaking customers' personal data. The leaked items include names, dates of birth, user IDs and addresses. The company confirmed the actual leak through its investigation, posted an apology in the CEO's name on October 30, and is determining the scale of damage.
Key facts
- Affected organization
- Hyundai Ezwel
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- Abnormal external access to the API used to look up member information
- Location
- South Korea
If your data was exposed
Exposed dataNameDate of birthUsernameAddress
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- Hyundai Ezwel posted an official apology in the CEO's name over the personal data leak.
- It emerged that abnormal access to the member information lookup API leaked seven items, including names, dates of birth, user IDs and addresses.
9 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.