Threat Intelligence Brief
Curated summary with source attribution
Source: finance.biggo.com
Threat Risk: Medium
Victim: Giftiel (Spoon/Lotte Group)
Incident: Unauthorized external access led to the theft of customer personal and financial information.
Impact: Exposure of bank account numbers and PII increases the risk of financial fraud and identity theft for affected customers.
Attacker: Unidentified threat actors
Analysis: The breach occurred via unauthorized external access to Giftiel’s systems, specifically targeting users who had submitted bank details for refunds. The inclusion of account numbers alongside personal identifiers significantly increases the likelihood of identity theft and financial crimes. Given Giftiel’s role in distributing vouchers for over 150 brands, the breach poses a systemic trust risk for the regional coupon ecosystem.
Recommendations: Monitor bank accounts for unauthorized transactions via integrated management services; Exercise extreme caution with unsolicited SMS or emails to avoid smishing and phishing; Update credentials and enable multi-factor authentication on all financial accounts
Source: BigGo Finance
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source