Jobis tax platform hit by hack, customer and payroll data exposed
Operator tax firm 에스브이 says unauthorized access ran from November 2 to November 5 and billing keys were discarded after a hacker's threatening email.
A hacking attack on the corporate tax and accounting platform Jobis exposed or possibly exposed customer personal data along with corporate payroll, payment and authentication information, the platform's operator announced on November 5.
The operator, tax firm 에스브이, said it confirmed the leak or possible leak of customer data through illegal external access. The unauthorized access is understood to have occurred between November 2 and November 5, according to dailysecu.com.
The company learned of the incident on November 5 through a threatening email from the hacker, then temporarily suspended service and blocked the intrusion route.
Data in scope includes corporate representatives' names, encrypted resident registration numbers, contact details, email addresses and HomeTax IDs. Employee names, encrypted resident registration numbers, email addresses and payroll information were also affected, as were card numbers, the billing keys used for recurring payments and related logs, and public certificate information stored in the service.
에스브이 said it discarded the relevant billing keys and blocked payments in consultation with its payment gateway. The company reported the incident to the Personal Information Protection Commission and KISA and is investigating with outside experts. It asked customers not to reply to the hacker's email or open attachments and links, and to check their card usage history. The number of affected companies and the exact scope of the leak have not been finalized.
Background
Jobis was launched in 2015 by 자비스앤빌런즈 as a corporate tax and accounting service. In December 2025 it was transferred to tax firm 에스브이 and has since been operated separately. Its website showed 56,889 cumulative corporate customers as of May 2021.
Quick answers
What data was exposed in the Jobis hack?
Corporate representatives' names, encrypted resident registration numbers, contact details, email and HomeTax IDs, plus employee names, encrypted resident registration numbers, email addresses and payroll information. Card numbers, recurring-payment billing keys and logs, and public certificate information stored in the service were also affected.
When did the Jobis breach happen?
The unauthorized access is understood to have occurred between November 2 and November 5, and the operator learned of it on November 5 through a threatening email from the hacker.
Is the personal tax refund service 삼쩜삼 affected?
No. 삼쩜삼 is stated to be unrelated to the incident.