Daekyo security incident history
Hacking, data breaches and other security incidents involving Daekyo, with related coverage.
Repeated Daekyo Hacks Leak Data of About 650,000 Members
650KImpact: Personal data of about 650,000 members
Daekyo was hacked in the same way in August 2024 and February 2025, leaking the personal data of about 650,000 members. Attackers exploited a vulnerability in an affiliate's website and used web shells and malware to reach the member database, and the leaked data included dates of birth and phone numbers. Daekyo neglected to analyze and block the activity even after being alerted to abnormal behavior during the first attack, and the investigation found unnecessary direct access allowed between the affiliate's web server and the member database. The Personal Information Protection Commission imposed a fine of 3.255 billion won and a corrective order.
Related reports: 28 · last report →