Entertainment giant HYBE hack incident has recently come to light, revealing that personal information of former and current employees as well as partner company affiliates was compromised due to unauthorized access to internal systems.
According to industry sources on the 2nd, HYBE posted a notice on its website last month stating, “Our company recently discovered signs of abnormal external access to the document preview solution of an external vendor linked to our electronic approval system during an internal security review.”
The company added, “During subsequent investigations regarding this issue, it was confirmed that similar unauthorized access occurred in the cost processing system as well. Some internal documents stored in both systems and the personal information contained within them were leaked externally, including details of partner affiliates and current and former personnel.”
HYBE issued an apology, stating, “We deeply apologize for causing concern due to the personal information leak.” The company noted that it has taken security measures such as completely blocking the IP addresses and access paths used in the attack to prevent any further exposure of information.
The leaked items include names, resident registration numbers, foreign resident registration numbers, passport numbers, account numbers, card numbers, mobile phone numbers, telephone numbers, email addresses, physical addresses, medical information, dates of birth, automatically generated information (IP), employee IDs, and department names.
HYBE stated that because the leaked items vary by individual, exact details regarding the compromised information were provided to each person through individual notices.
While noting that no cases of malicious use of the leaked personal information have been reported to date, HYBE urged individuals not to respond to emails, text messages, or messenger contacts demanding account information, money, or sensitive materials while impersonating company departments or employees, and to refrain from running attachments or clicking URL links from unverified emails.
HYBE concluded by emphasizing its commitment to security, stating, “Moving forward, our company will further strengthen access control and security monitoring for internal systems, and we will do our utmost to prevent similar accidents through thorough cause analysis and security system improvements once again offering our sincere apologies.”
