Zoomzoom Tour attack and review-page exposure of customer, guide and seller data

Add to my breach check

Made public

What leaked8

Hard to replace

  • Mobile number
  • Email address
  • Other profile data

Permanent

  • Photos
  • Private messages
  • Purchase or order history
  • Full name
  • Gender
  • Photosguide photos
  • Private messagescustomer service chats of some customers
  • Purchase or order historybooked product, tour date, party size, pickup place and amount paid
  • Full namecustomers, companions, guides and sellers
  • Gendercompanions and lead travellers
  • Other profile datacompanions' ages; vouchers of some customers; guides' nicknames, profiles and KakaoTalk IDs; sellers' business address and registration numbers

To-dos4 · about 55 min in all

  1. Know the scam pattern: calls and texts that cite these leaked detailsabout 5 minfreeLimits harm from: scam calls, phishing messages
  2. Register as an exposed person with the FSSabout 10 minLimits harm from: scam calls (opens in a new tab)
  3. Block new loans and cards in your nameabout 10 minLimits harm from: scam calls (opens in a new tab)
  4. If threatened: do not pay, keep the messages, report it to the policeabout 30 minfreeLimits harm from: extortion with private data
Company
Zoomzoom Tour
When it happened
–
Made public
Notice
Leak confirmed
Affected
unknown; some customers and guides (attack of 4 November 2026) and review writers, their companions and sellers (review pages, 2024-2026) · company notice as reported by the press

Outcome

The company reported the incidents to KISA and the PIPC (press). No decision.

Sources