Editorial watch
The latest records in the index, ordered by disclosure date. Status stays visible because a public claim, a live investigation and a confirmed disclosure are not the same thing.
Latest records shown
8
Confirmed
7
Still developing
1
Ninehire stated that names and account email addresses of corporate-member users were exposed. It said passwords, login-authentication information, phone numbers, payment information, and applicant data managed through the service were not included. The number of affected users has not been disclosed.
The academy stated that a hacker indicated it was obtaining all data, so personal information belonging to students and parents with a reservation history may have been exposed. Korean reporting says the likely fields include student name, school, grade and date of birth, plus parent phone number. The affected population and technical scope have not yet been confirmed.
Futureschole, operator of Liveklass, confirmed that names, enrollee names, email addresses, phone numbers, profile-image URLs, and internal service identifiers were exposed. It said passwords and financial payment information were not included. The affected-user count has not been disclosed; the platform's cumulative enrolment count is not treated as the incident total.
KLID's official notice confirms exposure of email senders' and recipients' names and email addresses. It states that the institution blocked the attacker's IP address, removed the vulnerable program, and continues to assess whether any additional data was affected. No total number of data subjects is publicly stated.
Kakao Games stated that the exposed items were third-party integration identifiers or IDs for Partners, and internal identifiers plus limited country codes for RINK. It said passwords and high-sensitivity data such as names and addresses were not confirmed as exposed.
Resume9 confirms unauthorised viewing of member information and the external issuance of download URLs for related files. It allows members to check their own affected fields individually; publicly described fields may include contact, birth-date, address, photo, education, and employment information. The company says passwords and payment or bank-account information were not within the confirmed scope, and the affected-user count has not been published.
Healing Paper reported that 219,665 domestic and international users were affected, including about 160,000 in South Korea. The reported data can include contact details, consultation and treatment information, consultation photos, and, for some users, payment details. The company said it reported the incident to KISA and requested a police investigation.
Company disclosure corroborated by Korean reporting. The company said the affected items were internal identifiers and purchase metadata, and that direct identifiers such as names and contact details were not included.
We publish a record with its current evidence status, rather than waiting for a final outcome. We do not turn a claim into a confirmed breach without attributable evidence. Source links and corrections remain part of every incident record.