Ticket Bay API breach leaks data of about 16,000 members
Ticket Bay said an external attacker abnormally accessed some of its APIs on October 21, exposing names, IDs and transaction records.
Ticket Bay disclosed that an external attacker abnormally accessed some of its APIs on October 21, leaking personal data of about 16,000 members, according to dailysecu.com.
The exposed data includes names, IDs and signup dates, as well as transaction information such as order history and performance names.
The ticket trading platform said it blocked the abnormal access path and completed a full system check. It also strengthened authentication and access permission verification and added security equipment.
Ticket Bay reported the breach to the Korea Internet & Security Agency (KISA) and to the Personal Information Protection Commission.
The company warned customers about texts, calls and emails that cite order, sale or report records and ask for refunds, extra payments or account confirmation. Ticket Bay said it does not ask for passwords or verification codes by text, call or email.
Users can check whether their data leaked through the 내 유출 내역 확인하기 menu after identity verification. Ticket Bay also advised users to change passwords that are reused on other sites.
Quick answers
How many Ticket Bay members were affected by the data leak?
About 16,000 members had personal data leaked after an external attacker abnormally accessed some of the platform's APIs on October 21.
What data was exposed in the Ticket Bay breach?
Names, IDs, signup dates and transaction information such as order history and performance names.
How can Ticket Bay users check if their data leaked?
Users can check through the 내 유출 내역 확인하기 menu after identity verification.