Science & Tech · Cybersecurity · 3 hrs ago
HYBE data breach exposes employees’ medical and financial details
HYBE disclosed a breach exposing personal information belonging to some current and former employees and business partners.
The South Korean music company, which represents BTS, said attackers accessed a vendor’s document-preview software linked to its approval system and a separate expense-management system.
The two incidents took place in September and October, according to HYBE.
Exposed details included resident registration and passport numbers, bank and card information, addresses, phone numbers and medical records; HYBE has not said how many people were affected.
The company said it blocked the access routes, reported the incidents to South Korean authorities and is notifying affected people.
HYBE said it had received no reports of suspected misuse and said it would strengthen security measures.
HYBE disclosed that a cyberattack exposed personal information belonging to current and former employees and business partners.
The leaked data included resident registration numbers, passport numbers, financial details, contact information and medical records.
The breaches occurred on Sept. 12-13 and Oct. 3-5, according to HYBE.
The company said the attackers used an outside vendor’s document preview software linked to its electronic approval system and also accessed its expense management system.
HYBE said it blocked access routes, reported the incident to authorities and was notifying affected people; it did not disclose how many were affected.
- Who
- Current and former HYBE employees and business partners were affected.
- What
- A cyberattack exposed personal, medical and financial information.
- When
- The breaches occurred Sept. 12-13 and Oct. 3-5. HYBE posted an apology on Oct. 18.
- Where
- HYBE systems in South Korea were affected.
- Why
- Unauthorized access occurred through an outside vendor’s document preview software linked to HYBE’s electronic approval system, with similar access found in its expense management system.
This story does not have two clearly opposing sides.
The first breach occurred, according to HYBE.
A second breach occurred, according to HYBE.
HYBE posted an apology and said an internal security inspection had detected unauthorized access.
- Affected groups
- Current and former employees and business partners
- Exposed data
- Resident registration numbers, passport numbers, financial details, contact information and medical records
- First breach
- Sept. 12-13
- Second breach
- Oct. 3-5
- Affected people
- Number not disclosed
- Authorities notified
- Korea Internet and Security Agency and Personal Information Protection Commission
2 sources
What people are saying
We deeply apologize for the concern caused by the personal information leak
Do not respond to any contacts impersonating the company or employees demanding account info, money, or sensitive materials, and refrain from opening email attachments or clicking URLs from unknown sources.
We will strengthen access control and monitoring systems within the company to prevent recurrence and devote all efforts to security.