Giftiel data breach leaks names, phone numbers and refund accounts
Spoon Inc. said unauthorized external access on 22 October 2026 exposed customer data and that it blocked the attacking IP and alerted authorities.
Spoon Inc., the operator of the mobile coupon service Giftiel, said some customers' personal data was leaked after unauthorized external access on 22 October 2026, according to dailysecu.com.
The company listed the leaked items as name, mobile phone number, email address and refund account number. It did not say in the notice how many customers were affected.
Spoon said it blocked the IP address used in the attack and strengthened system access controls after detecting the incident. It also reported the breach to security bodies and relevant authorities and requested an investigation.
Affected customers are being notified individually by MMS. Spoon published a notice and apology on its official website and advised customers to be wary of messages and calls from unknown sources.
Giftiel handles mobile coupon issuing, authentication, sales and settlement for about 150 brands and some 3,000 products. Spoon's website says the service completed electronic financial business registration in January 2025.
Quick answers
When did the Giftiel data breach happen?
Spoon Inc. said the unauthorized external access occurred on 22 October 2026.
What customer information was leaked?
Spoon listed name, mobile phone number, email address and refund account number.
How is Spoon notifying affected customers?
Spoon said it is contacting affected customers individually by MMS and posted a notice and apology on its official website.