SSG.com, the e-commerce subsidiary of Shinsegae Group, has reported a data breach involving some customers' personal information. An unauthorized individual exploited a security vulnerability in the system to access customer data without permission. The company has notified relevant authorities and is implementing additional security measures.
On November 6, SSG.com confirmed that some customers' personal information had been exposed to an unauthorized external party and individually notified the affected customers.
The leaked information primarily includes customer names and internal identification numbers. The exact number of affected customers has not been disclosed.
The incident occurred due to illegal access exploiting a vulnerability in the application programming interface (API), which connects different programs or systems to exchange data. It is believed that the unauthorized individual took advantage of this vulnerability to retrieve customer information.
After discovering the data breach on November 4, SSG.com initiated further security enhancements. The company reported the incident to the Korea Internet & Security Agency (KISA) on November 5 and to the Personal Information Protection Commission on November 6.
According to the company, no additional damage has been confirmed as a result of the breach so far. However, since the exact scope of the leaked information and the number of affected customers have not been made public, further verification is needed to assess the scale of the incident.
An SSG.com representative stated, "We have completed reporting to the relevant authorities and have individually informed affected customers. We will do our utmost to prevent customer harm and ensure that this does not happen again."
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.