ENKR

VT Cosmetics ERP system data leak

Add to my breach check

Made public

What leaked8

Hard to replace

  • Bank account number
  • Mobile number
  • Home or delivery address
  • Email address
  • Other profile data

Permanent

  • Resident registration number
  • Purchase or order history
  • Full name
  • Resident registration numberformer employees and sole-trader partners
  • Bank account numberformer employees and sole-trader partners: account number, bank and holder
  • Mobile numberphone number · type not stated
  • Home or delivery addresscustomers: delivery address and postcode; former employees and partners: address
  • Purchase or order historycustomers: ordered products, options and quantities, shop order number, tracking number, carrier, seller
  • Email addressformer employees and sole-trader partners
  • Other profile databusiness registration number

To-dos7 · about 1 h in all

  1. Block new loans and cards in your nameabout 10 minStops: loans or cards in your name · Limits harm from: scam calls (opens in a new tab)
  2. Block non-face-to-face account opening in your nameabout 10 minStops: bank account in your name · Limits harm from: scam calls (opens in a new tab)
  3. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls, loans or cards in your name, bank account in your name (opens in a new tab)
  4. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  5. Check your credit records and block status on credit4uabout 10 minfreeHelps you notice: loans or cards in your name (opens in a new tab)
  6. This weekRemove your address and phone from public profiles and tighten SNS privacyabout 20 minfreeLimits harm from: visits or contact at home
  7. When convenientReport the lost resident ID card on Gov24about 5 minLimits harm from: bank account in your name (opens in a new tab)

What happened next8 events

  1. Undetected 2 events5 days · show events
  2. Response 6 eventsNo individual notice on record · Back to latest
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record

Response: 6 events

Back to latest
  1. By the notice, reported to investigators
  2. By the notice, reported to the PIPC and KISA
  3. By the notice, strengthened two-step verification and access monitoring
  4. By the notice, blocked the attacker's access and changed the passwords of all accounts
  5. Apologised in the website notice
  6. Posted an apology for the data leak on its website
Company
VT Cosmetics
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
unknown; product buyers, former employees (incl. former GMP) and sole-trader business partners · press reports of the company notice

How the facts developed

  1. Company apology on its website: an attacker used a stolen employee account to enter the ERP system; data leaked on October 22, 2026 and October 23, 2026 (press)

Sources