Science & Tech · Cybersecurity · 1 hr ago
Kakao Work data breach exposed email contents and original attachments
An external attacker accessed a system supporting Kakao Work on November 9, Kakao Enterprise said.
Kakao Work is a workplace service for messaging, email and collaboration, used by Kakao Enterprise employees and others.
The exposed data included names, phone numbers, email contents and original attachments; the information exposed differed by person.
Those affected include current and former Kakao Enterprise employees, people using company accounts and some email recipients.
The total number of people affected has not been disclosed, and investigators are checking how the breach happened and whether more data was exposed.
Kakao Enterprise said no passwords have been confirmed as exposed, but advised users to change their Kakao Work and work email passwords.
The service provider blocked the access route, while Kakao Enterprise is checking its systems and says it will contact affected people as more details emerge.
Kakao Enterprise said personal information of some Kakao Work users was exposed after an external attacker accessed a system operated by service provider DK Techin.
The exposed information included names, phone numbers, email contents and original email attachments.
The affected people included current and former Kakao Enterprise employees, external users of company accounts and some email recipients.
The total number of affected people has not been disclosed, and the scope of the exposure is under investigation.
Kakao Enterprise said no passwords had been found to be exposed and advised users to change their Kakao Work and work email passwords.
- Who
- Some Kakao Work users, including current and former Kakao Enterprise employees, external users of company accounts and some email recipients.
- What
- Personal information, including email contents and original attachments, was exposed after an external attacker accessed a DK Techin system.
- When
- The intrusion was identified on November 9; Kakao Enterprise announced it on November 12.
- Where
- A system operated by DK Techin, which supplies Kakao Work. A physical location is not stated.
- Why
- Not stated
This story does not have two clearly opposing sides.
An external attacker accessed a DK Techin system, and the company identified signs of a data exposure.
Kakao Enterprise announced that some Kakao Work users' personal information had been exposed.
- Affected service
- Kakao Work
- System operator
- DK Techin
- Exposed data
- Names, phone numbers, email contents and original attachments, among other information
- Affected people
- Current and former Kakao Enterprise employees, external company-account users and some email recipients
- Passwords
- No password exposure had been confirmed as of the announcement