Hybe confirms hack; employee personal, financial and medical data leaked
Hybe confirmed that hackers accessed two internal systems, an outside company's document viewing tool and an expense processing system, leaking data of current and former employees and people working with partner companies. Reported data includes names, Korean ID numbers, passports, bank account and card details, phone numbers, addresses and medical information; a new social media post reports a new leak, unconfirmed by Hybe. Hybe says it blocked the access, notified affected people and reported the incident to Korean authorities; no misuse has been reported so far.
What happened
Hybe confirmed that hackers accessed two internal systems and leaked data of current and former employees and people working with partner companies. The company says it blocked the access, informed affected people and reported the incident to Korean authorities.
Why it matters
Reported data includes names, ID numbers, passports, bank accounts, cards and medical information, creating risk of financial fraud and scams for those affected. According to Hybe, there are no reports of misuse so far.
What to do
Check whether your company or team was notified by Hybe and monitor bank accounts and cards for suspicious activity. Partner companies should review what data they shared with Hybe.
For the technical team
- Affected
- Hybe Dois sistemas internos da Hybe: ferramenta de visualização de documentos fornecida por empresa externa e sistema de proc · Current and former Hybe employees and people working with partner companies.
- Exploitation
- Completed leak. Hybe says it blocked the hackers' access and reports no misuse of the data so far. A social media post reports a new leak with names, passports, bank accounts, credit cards, resident registration numbers and medical information, unconfirmed by the company.
- Fix
- No fix applicable as this is a data breach. Hybe says it blocked the access, notified affected people, reported the incident to Korean authorities and will strengthen its security.
- Vector
- Breach of two Hybe internal systems: a document viewing tool provided by an outside company and a system used to process expenses. The access method is not described in the sources.
- More details
- Reported leaked data includes names, Korean ID numbers, passport numbers, bank accounts, card details, phone numbers, addresses and medical information. Hybe apologized. A source asks whether artists' data, as they are also considered employees, was leaked, with no answer.
Timeline
New claim widens the scope of leaked data: passports, bank accounts, cards, resident registration numbers and medical information allegedly exposed.
Entertainment media reported on the Hybe hack and the leak of personal information.
First report: breach of two Hybe internal systems leaked personal, financial, and medical data of employees and partners.
Sources 3 sources
- @orul8ce @orul8ce
- @Koreaboo @Koreaboo
- @PopEmpirex @PopEmpirex
