Kedglobal Gangnam Unni Data Breach Exposes 220,000 Users' Sensitive Information
Article Content
- •Unauthorized API access led to the exposure of sensitive data for 220,000 users.
- •Leaked information includes personal details, consultation records, and payment information.
- •Users are advised to be vigilant against phishing scams following the breach.
Gangnam Unni, a cosmetic medical services platform, suffered a data breach due to unauthorized API access, affecting nearly 220,000 users globally. The leaked data includes names, phone numbers, email addresses, consultation records, and payment information. The breach primarily impacted users in Korea (160,000), Japan (48,000), and other countries. Healing Paper, the operator, detected suspicious activity and blocked the access route but found the attacker attempted to re-enter through another route. Affected users have been notified and can check their exposed data on the Gangnam Unni website for 30 days. The company has advised users to be cautious of phishing attempts related to the breach.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Coupang in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…