Philstarlife HYBE Data Breach Exposes Sensitive Employee and Partner Information
Article Content
- •HYBE confirmed a data breach affecting personal information of employees and business partners.
- •Compromised data includes sensitive information such as medical records and financial details.
- •Unauthorized access occurred via an external document-preview solution linked to internal systems.
HYBE, the South Korean entertainment company, confirmed a data breach affecting personal information of current and former employees and business partners. The breach was detected during an internal security inspection, revealing unauthorized access through an external document-preview solution linked to its electronic approval and expense-processing systems. Compromised data includes names, registration numbers, passport details, bank account information, credit card numbers, and medical records. The unauthorized access occurred between September 12-13 and October 3-5, 2026. HYBE has reported the incident to the Korea Internet and Security Agency and the Personal Information Protection Commission, and is notifying affected individuals. The company has not disclosed the number of individuals affected and has not received reports of misuse of the exposed information. HYBE is enhancing security measures to prevent future breaches.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track HYBE in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of information were compromised?
How many individuals were affected by the breach?
What actions is HYBE taking in response to the breach?
Continue Reading
Critical RCE Vulnerability in Prefab UI Disclosed A critical remote code execution vulnerability, CVE-2026-120338, was disclosed on November 1, 2026, affecting Prefab UI's Generative UI sandbox. The flaw allows attackers to execute arbitrary Python code by exploiting Deno's permissions, enabling file read/write access on the host server. This vulnerability affects… 
China-Linked Hackers Exploit PHP2Shell Vulnerabilities to Breach U.S. Government Systems On October 21, 2026, the PHP development team released patches for two critical vulnerabilities in PHP, known as PHP2Shell (CVE-2026-109618 and CVE-2026-109619), which allow unauthenticated remote code execution. These vulnerabilities were actively exploited by a suspected China-linked threat actor who compromised 25…