---
title: Company experiences data breach affecting 2,998 customers
url: https://www.dataloco.com/en/company-experiences-data-breach-affecting-2998-customers
published: 2026-09-25T19:21:34+00:00
language: en
section: Security
source: https://zdnet.co.kr/view/?no=20260923165020
publisher: Dataloco
---

# Company experiences data breach affecting 2,998 customers

An IT company has reported a data breach affecting 2,998 customers due to an external attack. The company has blocked the attack vector and is currently investigating the cause of the incident alongside relevant authorities while examining the possibility of additional data leaks.

On September 23, the company confirmed through a notice on its website that unauthorized access by an external attacker resulted in the leakage of some customers' personal information on September 21. As of 3 PM on that day, the number of confirmed affected customers was 2,998.

The leaked information includes customers' names, IDs, email addresses, and mobile phone numbers. As of now, no password leaks have been confirmed. However, the number of affected individuals and the details may change based on investigations conducted by relevant authorities.

The breach occurred at 11:45 AM on September 21, with the company first discovering it at 1:05 PM on the same day. The external attacker exploited insufficient validation of external requests for certain functions of the company's web services to access internal systems, resulting in the transmission of personal information outside.

Immediately after the incident was detected, the company blocked the external access route used in the attack and related accounts. It preserved logs and evidence for incident analysis, reinforced access control for the affected systems, and initiated measures to address the identified vulnerabilities, including a thorough check for similar vulnerabilities. Investigations to confirm additional data leaks and continuous monitoring for unusual activity have also been intensified.

The company reported the incident to the Korea Internet & Security Agency and the Personal Information Protection Commission. It is currently investigating the exact cause of the incident and any additional damage with relevant authorities and plans to provide individual notifications via email or text to affected customers.

The company provides IT infrastructure services, including cloud and security solutions, and is listed on the KOSDAQ. It has subsidiaries like KINX. Following ongoing uncertainties regarding management rights, the data breach has further compounded the company's challenges.

## This story in other languages

- [Русский](https://www.dataloco.com/ru/kompaniia-gabia-soobshhila-o-utecke-dannyx-2998-klientov)