SSG.com Personal Information Leak Part of Distribution Sector Breaches
The Chosun Ilbo · Yeon Ji-yeon Reporter ·
SSG.com Personal Information Leak Part of Distribution Sector Breaches Series of data breaches at Gmarket, Halys, 29CM highlights security vulnerabilities in South Korean retail industry
Some consumer personal information was leaked from SSG.com, an online shopping mall under the Shinsegae Group. SSG.com stated on the 6th that it had individually notified affected consumers of the data breach. The leaked information was mostly identified as customer names and internal consumer identification numbers. The number of affected consumers was not disclosed.
An SSG.com official said, “This incident occurred when external parties illegally accessed the system through an API (Application Programming Interface) vulnerability,” adding, “Upon identifying the breach, we immediately reported it to the Korea Internet & Security Agency and the Personal Information Protection Commission.” An API is a channel that connects different software to exchange data.
Recently, there have been a series of personal information leaks at distribution companies. Gmarket also experienced a data breach last month through the same method as SSG.com. The leaked information included consumer names, IDs, e-coupon PIN numbers, phone numbers, emails, and addresses.
Read the full story at The Chosun Ilbo · All coverage of this story