Data Breach at Golf Course Affects 100,000; North Korean Hackers Suspected

Severity: High (Score: 74.0)

Sources: Koreatimes.Co.Kr, Koreaherald, En.Yna.Co.Kr, Databreaches

Summary

On April 26, 2026, personal information of approximately 100,000 customers was leaked from the Lee & Lee Country Club in Gapyeong, South Korea. The Korean National Police Agency is investigating the breach, which is believed to have resulted from a hack attributed to North Korean hacking groups. The compromised data includes names, dates of birth, gender, user IDs, passwords, phone numbers, email addresses, and physical addresses. Authorities suspect that the golf club's server was infected with malware linked to these groups. The incident highlights ongoing concerns regarding North Korean cyber operations, with an estimated 8,400 hackers active as of 2024. The investigation is ongoing, and police are working to determine the full scope of the breach and its implications for affected individuals. Key Points: • 100,000 customer records leaked from Lee & Lee Country Club due to a cyber attack. • North Korean hacking groups are suspected to be behind the breach. • The compromised data includes sensitive personal information such as passwords and addresses.

Key Entities

• Data Breach (attack_type)
• Malware (attack_type)
• Lee & Lee Country Club (company)
• North Korea (country)
• South Korea (country)
• CWE-200 - Exposure of Sensitive Information (cwe)
• yna.co.kr (domain)