Back Kedglobal

Korea's cosmetic medical platform Unni suffers data leak exposing global user records

Kedglobal • September 7, 2026

Names of clinics and doctors, payment details and consultation photos were exposed, raising the risk of impersonation scams targeting cosmetic surgery patients

Foreign visitors spend $8.3 billion on Korean medical services in 2025

A foreign patient at a dentistry clinic in Seoul For years, South Korea has sold the world its pop music, dramas and beauty products. Now it is trying to turn the global fascination with Korean skincare and cosmetic treatments into something more lucrative: a high-spending tourism industry buil

Coupang user traffic returns to pre-data leak levels, but damage claims build

Coupang pioneered the same-day and dawn-delivery market in South Korea Coupang Inc.’s core business metrics rebounded in March, suggesting South Korea’s dominant e-commerce platform has recovered much of the ground it lost after a sweeping data breach scandal shook consumer trust la

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Gangnam Unni Data Breach Exposes 220,000 Users' Sensitive Information Gangnam Unni, a cosmetic medical services platform, suffered a data breach due to unauthorized API access, affecting nearly 220,000 users globally. The leaked data includes names, phone numbers, email addresses, consultation records, and payment information. The breach primarily impacted users in Korea (160,000), Japan (48,000), and other countries. Healing Paper, the operator, detected suspicious activity and blocked the access route but found the attacker attempted to re-enter through another route. Affected users have been notified and can check their exposed data on the Gangnam Unni website for 30 days. The company has advised users to be cautious of phishing attempts related to the breach. 3 sources 59

Extracted Entities

Korea's cosmetic medical platform Unni suffers data leak exposing global user records

The full story

Extracted Entities

Attack Types (1)

Companies (2)

Countries (1)

CWE Weaknesses (1)