Large Data Breaches Hit Retail and Corporate Sectors in Japan and Korea
Article Content
- •Over 3 million personal records leaked in Korea's retail sector due to API vulnerabilities.
- •Japan reported 260 million personal records compromised, with a sharp rise in breaches in October.
- •AI tools are being used to exploit vulnerabilities in corporate systems, affecting multiple companies.
In recent months, the retail sector in Korea has faced a series of personal data breaches, with over 3 million records compromised. SSG.com reported a breach on November 4, 2026, due to an API vulnerability, affecting customer names and IDs. Other companies like Gmarket and Halys have also reported similar incidents, with a total of approximately 3.83 million records leaked. Meanwhile, in Japan, around 260 million personal information records have been exposed since April 2026, with a significant surge in breaches reported in October. The Personal Information Protection Commission noted 2,094 incidents, with many attributed to AI-assisted hacking. The situation highlights vulnerabilities in both internal systems and third-party services, leading to increased security investments by affected companies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track E-Mart24 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
How many records were leaked in Korea?
What caused the breaches in Japan?
What actions are companies taking in response?
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access…
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…