ENKR

Interpark credential-stuffing breach

Add to my breach check

Made public · 784,920 records

What leaked5

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address

Permanent

  • Date of birth
  • Gender

To-dos

None of the harms this check covers.

What happened next10 events

  1. Undetected 2 eventsunder a month · show events
  2. Response 3 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. Penalty 5 eventsFine ₩1B · Back to latest
  5. DisputesNone on record

Penalty: 5 events

Back to latest
  1. Corrective order
  2. Administrative fine of KRW 3.6 million
  3. Penalty surcharge of about KRW 1.03 billion for failing to block abnormal logins
  4. No blocking policy against mass login attempts from one IP; 784,920 records leaked via credential stuffing
  5. PIPC opened a fact-finding investigation after the leak report
Company
Interpark
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
784,920 records · PIPC

How the facts developed

  1. Press report: Interpark locked the affected accounts and told their users by email; PIPC later confirmed 784,920 records without itemising them

Sources