A system error in the domestic business card management app 'Remember' has led to the exposure of some personal information to other users.
On the 21st, Remember stated that the incident was caused by an internal system error, not hacking or data breaches. The company conducted an immediate investigation into the possibility of external hacking and reported that no secondary damage has been identified so far.
According to Remember, the exposed information was limited to items listed on business cards and was not accessible to the general public. The app has approximately 5 million users.
The incident occurred on the 12th during a process of automatically inputting business card information, which experienced delays due to system malfunctions. During the normalization process, some business card information registered at a specific time was temporarily displayed incorrectly in the business card collection of another Remember user.
The exposed information includes the name, company name, department, position, company address, company phone number, mobile phone number, and email address as listed on the business cards.
Immediately upon recognizing the incident, Remember deleted all incorrectly displayed business card information and ensured that the affected user could no longer access it. There is no evidence that the exposed information was further leaked externally. The company is monitoring for any misuse of the exposed information following the incident.
A Remember representative stated, "We are continuously monitoring to prevent any secondary damage from the exposed business card information," adding that no secondary damage has been reported so far. However, the company did not disclose the specific scale of the exposed business cards.
The Privacy Commission plans to investigate the actual extent of the personal information exposure and the circumstances surrounding the incident based on the report and related materials submitted by Remember.
A Privacy Commission official stated, "Regardless of whether it was hacking or a system error, we will verify the circumstances of the incident and whether the obligations for personal information protection were properly fulfilled."
If violations of the Personal Information Protection Act are confirmed as a result of the investigation, administrative penalties such as fines or sanctions may be imposed. According to the Privacy Commission, the duration of the investigation will vary depending on the scale and severity of the incident, with minor cases taking up to three months, general cases up to six months, and major cases up to twelve months.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.