Barunson Mobile Wedding Invitations Hacked; Contact Details of Bride, Groom and Wedding Hosts May Have Been Exposed

[Financial News]  

 Mobile wedding invitations produced by Barunson Card and others appear to have been hacked, potentially exposing personal information such as the names and mobile phone numbers of the bride and groom and the wedding hosts. An outside attacker illegally accessed the company’s database (DB) and changed invitation information, and it was confirmed that personal information, including wedding gift account numbers, could also be accessed. However, it has not yet been confirmed whether any personal information was actually leaked or whether anyone was harmed.
According to a notice sent to customers on the 10th by Barun Company (Barunson M Card), an outside attacker illegally accessed the company’s database in November and December last year and altered stored information, including by adding characters to mobile wedding invitation titles. The company said it discovered this on the 7th.
The affected invitations were mobile wedding invitations produced from 2016 to 2021 by Barunson Card, Barunson Mall, Premier Paper, The Card and B Hands Card.
The information the attacker could access included names, mobile phone numbers, email addresses, invitation titles and greetings, the date, time and location of weddings, photo file paths, invitation authentication codes and order numbers. It also included the names and mobile phone numbers of the bride and groom and wedding hosts as entered on the invitations, as well as the bank names, account numbers and account holders for wedding gift accounts.
The information that could be accessed also included babies’ names and birthdays listed on first-birthday party invitations, and gathering names and primary contact details on gathering invitations. Resident registration numbers were not included.
Barun Company said it has not confirmed whether personal information was leaked or whether there have been any resulting cases of harm, and that it is continuing to investigate whether information was leaked.
The company said, "We have reported the incident to the relevant authorities and plan to inspect security vulnerabilities, delete the strings inserted into invitation titles, and invalidate invitation authentication codes, among other measures."
Barun Company urged people who receive text messages or calls from anyone impersonating the company or wedding-related businesses not to click links or transfer money. It said it would not send separate links or ask people to enter information in connection with this incident.
[email protected] Lee Bo-mi Reporter