Nol Universe Data Breach Exposes Customer, Employee Information

Some customer information was leaked from the travel and leisure platform Nol Universe due to a hacking incident. Nol Universe did not disclose the scale of the leak.

Nol Universe stated on its website on the 26th, “An external attacker exploited a security vulnerability in our system on the morning of the 22nd and gained abnormal access to the domestic accommodation reservation information inquiry function of the former Interpark Tour,” and added, “The reservation records leaked were for customers who used the domestic accommodation reservation service of the former Interpark Tour from February 15 of this year to September 8 of last month.”

The leaked information included member IDs, member numbers, reservation names, user names, phone numbers, email addresses, product names, purchase amounts, and usage dates. Reservations for Interpark Tour’s flights, overseas accommodations, tours, and tickets, as well as NOL service reservations, were not included in this leak.

Nol Universe stated, “Immediately upon detecting the incident, we blocked the access routes used in the attack, addressed the security vulnerabilities, and strengthened the system to detect and block abnormal access,” and added, “We have applied for technical support from the Korea Internet & Security Agency (KISA) to prevent further damage and conduct thorough follow-up measures.”

Meanwhile, on the 22nd, Nol Universe also confirmed that some employees’ personal information had been leaked due to a hacking incident. The leaked data included names, phone numbers, company emails, employee numbers, and encrypted passwords for accessing internal systems.

A source from Nol Universe stated, “Initially, we identified that the personal information of 2 people had been leaked, but our investigation revealed evidence that more user information was leaked than previously thought,” and added, “We will strengthen our overall security system.”