29CM Data Breach Exposes 159,000 Customers' Personal Information
IT DAILY ·
✦ AI Summary
29CM confirmed the leak of 159,000 pieces of customer personal information after unusual external access targeting an API linked to order information lookup functions.
The leaked information was mainly 138,841 names, while some cases also included email addresses, mobile phone numbers, and delivery information; payment information, IDs, and passwords were not included.
29CM blocked the access route, made a prior report to KISA, informed affected customers, and made it possible to check whether their information was leaked after identity verification on its website.
The industry said on the 30th that 159,000 pieces of customer personal information were leaked in an incident at 29CM, the online fashion and lifestyle select shop.
On the 27th, 29CM confirmed unusual external access targeting an API linked to order information lookup functions, and later verified that some customers' personal information had been leaked.
The leaked information was concentrated mainly in names. There were 138,841 cases of name leakage.
In some cases, email addresses, mobile phone numbers, and delivery information were also leaked. The number of cases in which names and additional information were leaked at the same time was 21,011.
Payment information was not included among the leaked items, and IDs and passwords were also not included.
29CM said it blocked the abnormal access route immediately after confirming the problem, made a prior report to the Korea Internet & Security Agency (KISA) about the personal information leak, and completed protective measures to prevent additional damage. Photo: Screenshot of the 29CM website.
After the personal information leak occurred, the company separately informed affected customers of the leaked items and how to prevent secondary damage.
29CM users can check whether their personal information was leaked by verifying their identity on a separate page on the website.
29CM apologized for causing concern to customers and said it would work to strengthen information protection.
29CM is an online select shop launched in 2011. Musinsa acquired 29CM and its parent company, StyleShare, for KRW 300 billion in 2021. According to WiseApp Retail data, 29CM's MAU stood at 1,929,153 last month.
Source: IT DAILY · Kim Ho-jun
Original: https://www.itdaily.kr/news/articleView.html?idxno=241290
References
This article was produced with the help of an automated content generation algorithm.
Source: IT DAILY
View originalThis article was summarized and organized by BizCrush based on the original article from IT DAILY. For exact quotations and full details, please refer to the original article.