Nol Universe admits Korea data breach, boosts security after hacks

Nol Universe apologized and said on the 26th that it had strengthened its security system after an external hack leaked some personal information of customers and employees.

Nol Universe said on its website that on the 22nd an external attacker exploited a system security vulnerability to make abnormal access to the information lookup function for domestic lodging bookers of the former Interpark Tour.

The leaked records are the reservation histories of customers who used domestic lodging reservation services at the former Interpark Tour from Feb. 15 to Sept. 8 this year. The leaked items are member ID, member number, booker name, user name, phone number, email address, product name, purchase amount, and date of use.

Reservations for Interpark Tour's flights, overseas lodgings, tours, and tickets, and reservations for the Nol (NOL) service were not included in this leak.

Nol Universe said it blocked the access path used in the attack and patched the security vulnerability immediately after identifying the incident. It strengthened the system to detect and block abnormal access and requested technical support from the Korea Internet & Security Agency (KISA) to prevent additional damage and for follow-up measures.

It asked customers to be cautious of suspicious emails, text messages, and phone calls. It advised them not to click links of unclear origin or enter personal or authentication information.

Earlier, Nol Universe also said on the 22nd that some employees' personal information had been leaked. It determined that on the 19th an external attacker exploited a system security vulnerability to make abnormal access to an employee information lookup function.

The leaked employee information includes name, phone number, company email, employee number, and an encrypted internal system login password. The company said it also blocked the access path and patched the security vulnerability for that incident.

A Nol Universe official said, "We deeply apologize for the occurrence of this security incident," adding, "We are identifying the intrusion path and scope, will fully cooperate with the relevant authorities, and will continue to verify the facts and take response measures." The official added, "Based on the investigation results, we will strengthen our security system across the board."