ENKR

Malgeunsoft e-learning vendor breach affecting 20+ organisations

Add to my breach check

Made public · 2,370,000 records

What leaked11

Replaceable

  • Password

Hard to replace

  • Mobile number
  • Home or delivery address
  • Email address
  • Employer
  • Other profile data
  • Username

Permanent

  • Connecting information
  • Date of birth
  • Full name
  • Gender
  • Employerorganisation and, at some sites, job title
  • Other profile dataDI, guardian information, employee numbers, site-specific fields; at some client sites lawyer registration numbers, actuary registration numbers and doctor licence numbers · SBS October 6, 2026

To-dos7 · about 2 h in all

  1. Change the leaked password everywhere you reused itabout 30 minfreeStops: account takeover
  2. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  3. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  5. Turn on two-step sign-in for email and bankingabout 15 minfreeLimits harm from: account takeover
  6. Do nowUse an authenticator app or passkey instead of SMS codesabout 20 minfreeLimits harm from: account takeover
  7. This weekRemove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home

What happened next18 events

  1. Undetected 2 events3 days · show events
  2. Response 14 eventsNotice in 2 days · show events
  3. RemedyNone on record
  4. Penalty 2 eventsUnder investigation · Back to latest
  5. DisputesNone on record

Penalty: 2 events

Back to latest
  1. KISA breach investigation carried out
  2. PIPC opened an investigation, classed internally as a major case; the company reported about 2.37 million records
Company
Malgeunsoft
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
2,370,000 records · approx.; company report to PIPC, being verified

How the facts developed

  1. First press reports of client notices (국방부, 국민권익위, 한국교육시설안전원, 기아 노조, 대한상사중재원); the company reported to PIPC on 09-22, 09-24 and 09-29, and PIPC opened an investigation on 09-30

Sources