ENKR

LCSI website hack, possible member data leak

Add to my breach check

Made public

What leaked9

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data
  • Username

Permanent

  • Date of birth
  • Purchase or order history
  • Full name
  • Passwordencrypted password
  • Mobile numbermobile or other phone number
  • Purchase or order historytest applications and use, test-paper delivery details
  • Other profile datacorporate members: company name, business registration number, company address and phone

To-dos7 · about 2 h in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. This weekUse an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover
  7. When convenientRemove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next7 events

  1. Undetected 2 events2 days · show events
  2. Response 5 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Reported to KISA and other agencies by the notice date
  2. By the notice, deleted the malicious files, changed all database and server passwords and fixed website flaws
  3. Apologised to members in the notice
  4. First notice: member data may have leaked; no trace found so far that data actually left
  5. Blocked the intrusion on the day it was found
  6. Found an outside intrusion (hacking) into its website
  7. Intrusion began
Company
LCSI
When it happened
–
Company detected it
Made public
Notice
Possible leak
Affected
unknown; individual and corporate members of the LCSI website · possible leak; company notice

How the facts developed

  1. Company notice: through a website flaw, the member database could be reached from outside from October 21, 2026 to October 23, 2026; leak not ruled out

Sources