Skip to content
Gmarket Completes Compensation for Data Breach Victims

Gmarket Completes Compensation for Data Breach Victims

First seen 2 Nov 2026, 05:12 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 2, 2026 at 06:16 UTC
  • •Gmarket compensated all affected customers following a data breach.
  • •The breach involved unauthorized use of e-coupons and exposed personal information.
  • •Emergency security measures and PIN replacements are being implemented.

Gmarket announced on November 1, 2026, that it has completed compensating customers affected by a personal data breach. The breach involved unauthorized use of e-coupons due to a vulnerability in an external service's API, exposing customer names, user IDs, phone numbers, email addresses, and mailing addresses. Customers who suffered financial losses received full compensation, while those whose personal information was exposed but not misused received 10,000 won ($7) in digital currency. The breach was detected on October 27, and Gmarket reported it to the Korea Internet & Security Agency (KISA) on October 30. The company has implemented emergency security measures and is replacing e-coupon PINs for all affected customers. Gmarket has not disclosed the number of customers affected.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-27
Breach detected
Gmarket discovered unauthorized access attempts exploiting an API vulnerability.
En.Sedaily
2026-10-30
Breach reported to KISA
Gmarket reported the data breach to the Korea Internet & Security Agency after confirming the incident.
En.Sedaily
2026-11-01
Compensation completed
Gmarket announced it had fully compensated customers affected by the breach.
En.Sedaily

More articles in this cluster (2)

Following this threat?

Track Gmarket in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (4)

1 / 3

Common questions

What personal information was exposed?
The exposed information included customer names, user IDs, phone numbers, email addresses, and mailing addresses.
How was the breach discovered?
Gmarket detected unauthorized access attempts exploiting a vulnerability in an external service's API.
What compensation did affected customers receive?
Customers who suffered financial losses received full compensation, while those whose data was exposed received 10,000 won in digital currency.