SEOUL, November 09 (AJP) - SM Entertainment and two of its affiliates have suffered a data breach exposing sensitive personal information, including national identification numbers, bank account details and contract records.
The company said an external attacker gained unauthorized access to internal business systems, including its electronic document approval platform, and extracted stored files around Nov. 4.
The compromised information includes names, phone numbers, addresses, South Korean resident registration numbers, bank account details, job titles and information contained in contracts.
The breach also affected DearU, operator of the fan communication platform Bubble, and concert production company Dreammaker Entertainment.
DearU said the exposed records concerned employees and that Bubble users' personal information was not affected.
SM said it immediately blocked the IP addresses and access routes used in the attack and replaced compromised access keys. It is investigating the incident with relevant authorities and outside security specialists.
The company has not disclosed how many people were affected or how many documents were taken. It said it was identifying affected individuals and notifying them by email or text message.
No secondary damage has been confirmed so far, SM said, but the company warned of possible phishing attempts and fraudulent calls impersonating its representatives.
SM apologized for the breach and pledged to strengthen its internal security controls and monitoring systems.
Copyright ⓒ Aju Press All rights reserved.
