Science & Tech · Cybersecurity · 10 hrs ago
SM Entertainment and Affiliates Report Personal Data Leak
SM Entertainment and two affiliates reported a personal data leak in South Korea.
The company said an outside attacker accessed its work systems without permission around Nov.
4 and took some stored documents.
The exposed information included phone numbers, addresses, bank account and national ID numbers, as well as details from contracts.
The affected affiliates were DearU, which operates the Bubble fan messaging app, and Dream Maker Entertainment, which plans performances.
No cases of the leaked data being misused have been found so far, according to SM.
The company said it blocked the attack routes and replaced access keys after discovering the breach.
SM and government authorities are investigating what happened, and the company says it will review and strengthen its security systems to help prevent another incident.
SM Entertainment and two affiliates reported that an external attacker accessed company systems and leaked files containing personal information.
The affected affiliates were DearU, which operates the Bubble fan communication app, and Dream Maker Entertainment, a concert-planning company.
The leaked information included phone numbers, addresses, bank account numbers, resident registration numbers and details recorded in contracts.
SM said the leak occurred around Nov. 4 and that the companies were investigating the incident with relevant authorities.
The company said it had found no cases of the leaked information being misused to cause further harm.
- Who
- SM Entertainment and affiliates DearU and Dream Maker Entertainment reported the leak. The exposed information included data belonging to employees.
- What
- An external attacker accessed work systems without authorization and leaked some stored documents containing personal information.
- When
- The leak occurred around Nov. 4, 2026. SM announced it on Nov. 8.
- Where
- In the companies’ work systems, including SM’s electronic approval system.
- Why
- The attacker’s motive is not stated. The companies said they were investigating how the incident occurred.
This story does not have two clearly opposing sides.
The personal information leak occurred, according to SM.
SM announced the leak and said it was investigating the incident with relevant authorities.
- Affected companies
- SM Entertainment, DearU and Dream Maker Entertainment
- Reported leak date
- Around Nov. 4, 2026
- Information exposed
- Phone numbers, addresses, bank account numbers, resident registration numbers and contract details
- Further harm
- No cases of misuse causing secondary harm had been confirmed
- Attack response
- SM said it blocked the IP address and access route used in the attack and replaced the unauthorized access key
1 source
What people are saying
We sincerely apologize for causing concern with this incident.
So far, no cases of secondary harm from the leaked personal information have been confirmed.