Nolbal (Woongjin Compass) member data breach

Add to my breach check

Made public · 67,000 members

What leaked3

Hard to replace

  • Mobile number
  • Email address
  • Other profile data
  • Other profile datanickname

To-dos

None of the harms this check covers.

What happened next8 events

  1. Undetected 2 events1 day · show events
  2. Response 6 eventsNo individual notice on record · show events
  3. RemedyNone on record
  4. PenaltyNone on record
  5. DisputesNone on record
  1. Notice and apology from the CEO in the Nolbal app
  2. Anomaly detected in the morning and access blocked
  3. Intrusion began
  4. Two-factor authentication for admin accounts and tighter access control announced
  5. Affected members told by text message and email
3 more
  1. Seocho police asked to investigate
  2. Reported to KISA and PIPC
  3. Back-office external access cut, admin passwords changed and suspicious accounts suspended
Company
Nolbal
When it happened
–
Company detected it
Made public
Notice
Leak confirmed
Affected
67,000 members · approx.; about 2.9% of 2.3 million; press

How the facts developed

  1. Notice that an outsider accessed the service back office from 18:45 on October 18, 2026 to 00:50 on October 19, 2026 and looked up member data; passwords and payment data not included (press)

Sources