Ninehire has confirmed an exposure affecting reported accounts.
Not disclosed
reported impact · Low practical risk
NameEmail
Source · Ninehire notice and MoneyToday reporting
Independent public index · South Korea
Data breaches, made visible.
A public record of reported personal-data breaches affecting organisations in South Korea — with the status and source behind every entry.
Accounts reported affected
167.9M
Across 92 incidents. Totals may include duplicate accounts.
Index counter 167,930,948
Oct 2026 incidents
0
Confirmed
0
Investigating
0
Claims awaiting proof
0
Incident index
Latest reported breaches
Showing 1–20 of 92 incidents
Status
Sector
Investigating
An investigation is underway into a reported exposure involving Thinking Bull Math Academy.
Under investigation
scope not yet confirmed · High practical risk
NameSchoolGradeDate of birthPhone number
Source · Thinking Bull parent notice and Korean media reporting
Confirmed
Futureschole (Liveklass) has confirmed an exposure affecting reported accounts.
Not disclosed
reported impact · High practical risk
NameEmailPhone numberProfile image URLAccount ID
Source · Futureschole notice and Korean media reporting
Korea Local Information Research & Development Institute (KLID) has confirmed an exposure affecting reported accounts.
Not disclosed
reported impact · Low practical risk
NameEmail
Source · KLID public incident notice
Confirmed
Kakao Games (Partners / RINK) has confirmed an exposure affecting reported accounts.
140 users
reported impact · Low practical risk
Account IDCountry codeOther
Source · Kakao Games disclosure and Korean media reporting
Resume9 has confirmed an exposure affecting reported accounts.
Not disclosed
reported impact · High practical risk
NamePhone numberDate of birthAddressPhotoEducation recordsEmployment records
Source · Resume9 public incident notice
Gangnam Unni (Healing Paper) has confirmed an exposure affecting reported accounts.
219,665 users
reported impact · Critical practical risk
NameEmailPhone numberMedical recordsPayment informationOther
Source · Healing Paper disclosure and Korean media reporting
Confirmed
Weverse Company (HYBE) has confirmed an exposure affecting reported accounts.
422,584 account IDs
reported impact · Critical practical risk
Account IDPayment informationOther
Source · Weverse Company disclosure and KISA incident report
Claimed
A public claim alleges that data connected to Kwangmyung Industry may have been exposed.
Not disclosed
reported impact · Low practical risk
Not publicly detailed
Source · BlackLocks leak-site claim, tracked by threat-intelligence services
Investigating
An investigation is underway into a reported exposure involving TVING (CJ ENM).
39.54M accounts
reported impact · Critical practical risk
NameDate of birthPhone numberEmailAccount IDBank accountPayment information
Source · MSIT/KISA joint investigation and PIPC
GS Retail has confirmed an exposure affecting reported accounts.
1,660,153 people
reported impact · Critical practical risk
NameDate of birthPhone numberAddressEmail
Source · PIPC decision
Confirmed
Enrise (Wippy) has confirmed an exposure affecting reported accounts.
736 accounts
reported impact · Low practical risk
Not publicly detailed
Source · PIPC decision
Confirmed
Atoz (SKT ifland event) has confirmed an exposure affecting reported accounts.
1,140 people
reported impact · Low practical risk
Not publicly detailed
Source · PIPC decision
Confirmed
29CM (Musinsa) has confirmed an exposure affecting reported accounts.
159,852 records
reported impact · High practical risk
NameEmailPhone numberDelivery address
Source · 29CM disclosure and Korean media reporting
KT Corp has confirmed an exposure affecting reported accounts.
16,647 subscribers
reported impact · Critical practical risk
Phone numberPayment informationOther
Source · PIPC decision
Confirmed
TikTok Pte. Ltd. is listed for a confirmed privacy or data-handling violation.
9.45M active users
reported impact · Critical practical risk
Behavioural dataOther
Source · PIPC decision
Confirmed
Apple Distribution International is listed for a confirmed privacy or data-handling violation.
Not disclosed
reported impact · Low practical risk
Voice data
Source · PIPC decision
Confirmed
Woori Bank has confirmed an exposure affecting reported accounts.
17,551 customers
reported impact · High practical risk
NamePhone numberOther
Source · Woori Bank disclosure and PIPC
Confirmed
Bithumb (BTC Korea) is listed for a confirmed privacy or data-handling violation.
Not disclosed
reported impact · Low practical risk
Other
Source · PIPC decision
Day1Company (FastCampus, Coloso et al.) has confirmed an exposure affecting reported accounts.
Not disclosed
reported impact · Critical practical risk
NameEmailPhone numberPassword (hashed)AddressOther
Source · Day1Company disclosure
FAQ
Reading the index responsibly
What does Confirmed mean?
A company, regulator, or documented official decision supports the incident. It does not mean the final scope can never change.
What is the difference between Claimed and Investigating?
A claim is an attacker or public allegation without independent confirmation. Investigating means a company, regulator, or credible report has identified an active matter whose facts are still being established.
How can I check whether I am affected?
Use the company’s official notice, app, or support channel. Do not enter credentials on a link sent in an unsolicited message.
Can I ask for a correction?
Yes. Send an official or public source through the correction form. Material changes are recorded in the incident timeline.