Incident record
데이원컴퍼니 (패스트캠퍼스·콜로소 등)
Day1Company (FastCampus, Coloso et al.) · Education
This record separates what has been publicly claimed, investigated, and confirmed. It does not imply that every affected account belongs to a unique person.
Reported impact
Not disclosed
Disclosure recorded
2026-06-11
Sector
Education
Practical risk
Critical
What this means
A practical reading of this record
The public record supports a critical practical risk level based on the currently reported scope and data categories. This can change if the organisation or regulator updates the record.
- Change the password for this service through its official app or website. Change it anywhere you reused it.
- Expect targeted phishing and account-recovery scams. Do not share verification codes with an unsolicited caller.
Classification
Categories are assigned only where the currently stored public record supports them. A privacy decision is not automatically treated as a hacking incident.
Evidence status
Why it appears in the index
Confirmed by the organisation, a regulator, or a documented official decision.
The company and Korean reporting stated that customers and instructors across FastCampus, Coloso, Zerobase, MyLight, Newspresso, Respec, Shiny English, and Wannaspeak were affected. No total was publicly disclosed.
Recorded source · Day1Company disclosure ↗
Editorial record
Review and status trail
Last reviewed
2026-09-21
The latest editorial review of the stored public record.
Latest source event
2026-06-11
The most recent dated event currently documented on this page.
Confirmed
Current status recorded from the first documented public event in this entry.
Documented events
Public timeline
- 01
First intrusion
An attacker reportedly used a stolen GitHub master-account key to access company services.
- 02
Detection
The company identified a possible security incident, blocked the threat, and applied remediation.
- 03
Public notice
Day1Company confirmed customer-data exposure across eight services while the scale remained under assessment.
Data reported exposed
Protect your account
Change your password if you use this service
Use a new, unique password through the official app or website. Change any other account where you reused it, and enable a passkey or two-factor authentication when available.
Correction
Is something inaccurate or outdated?
Send a public source or official correction. Material updates are logged rather than silently replacing the record.