Customer Personal Information Breach at Hyundai EZWEL

[Financial News] An incident involving the leakage of customers’ personal information to an outside party occurred at Hyundai EZWEL.
According to a notice posted on Hyundai EZWEL’s website on the 30th, there was recently abnormal external access to the member information lookup API (application programming interface), and an investigation confirmed that personal information had been leaked. The leaked information comprised five categories: names, dates of birth, gender, mobile phone numbers, and email addresses. The scale of the breach is still under investigation.
Hyundai EZWEL detected abnormal access at around 9 p.m. on the 29th and blocked the IP address used in the attack. It also completely suspended external access to the system. The company reported the incident to the Financial Supervisory Service and the Korea Internet & Security Agency (KISA), and is working with relevant agencies to determine how the breach occurred and the extent of the damage.
So far, no further damage resulting from the leak or signs of the information being misused have reportedly been found. The company plans to notify individually those customers confirmed to have been affected by the leak, providing details of the incident and precautions to prevent harm.
The company is also operating a dedicated 24-hour consultation center to handle customer inquiries and reports of harm. It says it will compensate customers for the full amount of any losses if it is confirmed that they suffered damage as a result of this incident.
Hyundai EZWEL said, "To prevent further harm from the misuse of leaked information, we urge you to exercise particular caution and refrain from clicking links from unclear sources, downloading attachments, or responding to requests to enter personal information." It added, "Taking this incident as an opportunity, we will thoroughly re-examine our company-wide security systems and vulnerabilities from the ground up. We will also activate a 24-hour real-time monitoring system elevated to the highest level to significantly strengthen security, and establish fundamental preventive measures to ensure similar incidents do not recur."

[email protected] Ye Byung-jung Reporter