Hack at chak platform exposed data of 3,083 users
Korea Minting, Security Printing & ID Card Operating Corporation says overseas IP access was cut off and the targeted server was temporarily suspended.
A breach on the chak mobile local currency gift certificate platform allowed unauthorized outsiders to view the personal data of 3,083 users, the Korea Minting, Security Printing & ID Card Operating Corporation confirmed, according to dailysecu.com.
The data viewed included names, dates of birth, mobile phone numbers, account numbers, CI linking information, email addresses and encrypted card numbers.
The corporation detected abnormal access signs around 09:30 on November 13 and blocked the suspected IPs. Access from overseas IPs was fully restricted and the targeted server's service was temporarily suspended.
As of 06:00 on November 14, 3,072 of the affected users had two or fewer items viewed, while 11 had three to four items viewed.
The corporation reported the incident to KISA and other related institutions and is investigating the intrusion route and possible additional damage. It said it has strengthened security checks and monitoring and is notifying affected users.
What chak is
chak is a mobile platform run by the Korea Minting, Security Printing & ID Card Operating Corporation for buying, charging and paying with local currency gift certificates issued by local governments.
Quick answers
How many users were affected by the chak breach?
The personal data of 3,083 users was viewed by unauthorized outsiders.
What data was exposed in the chak incident?
Names, dates of birth, mobile phone numbers, account numbers, CI linking information, email addresses and encrypted card numbers.
What did the operator do after detecting the breach?
It blocked the suspected IPs, fully restricted access from overseas IPs, temporarily suspended the targeted server's service, reported the incident to KISA and began investigating the intrusion route.