Threat Intelligence Brief
Curated summary with source attribution
Source: biz.chosun.com
Threat Risk: Medium
Victim: Seoul Facilities Corporation
Incident: Data breach of 4.62 million subscribers due to missing authentication tokens.
Impact: Exposure of PII including phone numbers, emails, and addresses for millions of users.
Attacker: Two teenagers
Analysis: The breach occurred because the system allowed access to personal data without requiring authentication tokens, a critical failure in access control. This architectural flaw enabled low-skill attackers to scrape PII for millions of subscribers over an extended period. The delayed response and failure to notify victims exacerbate the risk of secondary phishing and fraud.
Recommendations: Implement strict token-based authentication for all API endpoints; Establish a transparent incident response and notification protocol; Conduct regular penetration testing on public-facing mobile application backends
Source: Chosunbiz
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source
Latest Developments
Update — 2026-08-24 17:30 UTC
Data breach via authentication bypass in the Ttareungyi app. Personal information of approximately 4.62 million users was compromised. The breach was caused by a system vulnerability that allowed access to personal data without a required authentication token. This oversight enabled attackers to exfiltrate a wide range of PII, including home addresses and phone numbers, while the organization failed to notify victims for nearly two years.
Corroborating source: en.sedaily.com