Kakao Work Also Breached... Work Emails and Attachments Leaked

[Financial News] A personal information breach occurred on Kakao Work, an enterprise collaboration tool created by Kakao Corp. The leaked data included not only personal information such as names and contact details, but also the contents of work emails and the original attached files.
Kakao Enterprise and DK Techin, the operator of Kakao Work, said on the 13th that some users’ personal information was leaked on the 9th when an external attacker gained abnormal access to DK Techin’s Kakao Work system.
Kakao Enterprise, which uses Kakao Work as an internal collaboration tool, said in a notice the previous day that information belonging to its current and former employees, external individuals who used company accounts, and some email recipients had been leaked.
The confirmed leaked data included names, nicknames, departments, mobile phone numbers and email addresses. It also included email subject lines and contents, attachment filenames, encrypted messages, filenames of files attached within messages, and the original attached files. In other words, the leak extended beyond basic information such as contact details to include content exchanged for work.
The types and scope of data leaked vary by individual, and the total number of people affected has not been disclosed. Kakao Enterprise plans to notify those affected separately of the results of its further investigation. DK Techin removed the external access route to block further attacks and is investigating whether there have been additional leaks and the extent of the damage. Users can also check whether their information was leaked on DK Techin’s personal information breach lookup page.
Kakao Enterprise is checking the circumstances of the incident and the scope of the leak with the operator, while also reviewing the security of its business systems and accounts.
Kakao Enterprise said it has found no evidence of leaked passwords so far, but recommended that users change the passwords for related accounts, including Kakao Work and work email accounts, as a precaution. It also urged users to be wary of text messages and emails impersonating the company or the service operator, as well as links and attachments from unclear sources.

[email protected] Jang Min-kwon Reporter