AJP Asia Intelligence Agency

Potential Data Breach at Yellow Umbrella Affects 1.92 Million Subscribers

The Yellow Umbrella, operated by the Korea Federation of Small and Medium Businesses, may have experienced a data breach involving some personal information.


On November 14, the federation posted a notice on the Yellow Umbrella's official website regarding the possibility of a data leak and confirmed the occurrence of a security incident.


According to the federation, on November 11, it detected abnormal access to the Yellow Umbrella website and suspicious signs of third-party inquiries into some customer personal information.


The potentially leaked personal information includes names, the first seven digits of resident registration numbers, mobile phone numbers, home addresses, home phone numbers, email addresses, and consent for receiving text messages and emails.


The federation explained that the remaining digits of the resident registration numbers are managed in an encrypted format that cannot be decrypted.


Launched in 2007, the Yellow Umbrella is a mutual aid program designed to help small businesses and self-employed individuals prepare retirement funds in case of business closure or old age. Currently, it has approximately 1.92 million registered subscribers.


Upon recognizing the incident, the federation immediately blocked the IP addresses used in the attack and strengthened its security policies. It has reported the incident to the Korea Internet & Security Agency (KISA) and is operating a response center for damage reporting and consultation.


The federation urged the public not to respond to calls or messages requesting money or loans while impersonating federation or Yellow Umbrella officials, and to be cautious of any requests for ID and password input or changes.


Meanwhile, there has been a recent surge in hacking and data breach incidents targeting companies and institutions. The Financial Security Institute estimates that over 130 files from 48 financial companies were leaked due to a recent hacking attack. As of November 12, it has blocked 246 IP addresses used in the attacks and is investigating the circumstances surrounding the incidents.





* This article has been translated by AI.