ENKR

Hanpass customer data breach through an API

Add to my breach check

Made public

What leaked5

Hard to replace

  • Income, balances, loans, credit or other financial details
  • Mobile number
  • Home or delivery address
  • Other profile data

Permanent

  • Full name
  • Income, balances, loans, credit or other financial detailsoriginal certificates of income amount issued through the service
  • Mobile numberHanpass Mobile subscribers' phone numbers
  • Home or delivery addressHanpass Mobile subscribers
  • Full nameHanpass Mobile subscribers
  • Other profile dataoriginal certificates of alien registration facts; subscribers' nationality and prepaid or postpaid payment data

To-dos4 · about 45 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  3. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Remove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next6 events

  1. Undetected 2 events0 days · show events
  2. Response 4 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. By November 6, 2026, reported the incident to the PIPC, KISA and the Financial Supervisory Service · press
  2. By November 6, 2026, finished urgent measures including stronger API key authentication · press
  3. By November 6, 2026, had blocked the unauthorised access path, right after becoming aware · press
  4. By November 6, 2026, posted a notice and apology about the leak · press
  5. Became aware of the incident at about 10:00 KST; the leak is thought to have started at about 04:38 KST the same day · press
  6. Intrusion began
Company
Hanpass
When it happened
Company detected it
Made public
Notice
Leak confirmed
Affected
unknown; some Hanpass customers and Hanpass Mobile subscribers · the company notice gives no count; press

Sources