ENKR

Gowid spend-optimisation service client contact data leak (2026)

Add to my breach check

What leaked7

Hard to replace

  • Mobile number
  • Home or delivery address
  • Partial card number
  • Email address
  • Job title
  • Other profile data

Permanent

  • Full name
  • Mobile numberphone number · type not stated
  • Home or delivery addressaddress · type not stated
  • Partial card numbermasked card number and card issuer; Gowid says it keeps no expiry date or CVC
  • Full nameclient companies' contact persons
  • Other profile dataGoogle Workspace billing details · items, unit prices, seat counts

To-dos4 · about 45 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  3. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next3 events

  1. UndetectedNone on record
  2. Response 3 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Reported the intrusion to KISA at 16:05 KST
  2. Cancelled all abnormal charges at 08:18 KST and blocked the access IPs and the payment function
  3. Found the intrusion in the Google Workspace subscription billing function
Company
Gowid
Company detected it
Notice
Leak confirmed

Sources