From Procedure History to Payment Methods... Personal Data of 220,000 Users Leaked

[Anchor]

Personal information belonging to 220,000 users of Gangnam Unni, South Korea's largest beauty and medical information platform, has been leaked. The compromised data includes not only names and phone numbers, but also medical procedure histories and photos.

Reporter Kwon Ran has the details.

[Reporter]

User A, who has used the aesthetic medical information platform Gangnam Unni for over five years, felt a wave of anxiety upon hearing the news of the personal data leak, having frequently posted reviews about medical procedures.

[User A / Gangnam Unni Data Leak Victim: It is a bit awkward to talk about what procedures I had done, and details like that could potentially be exposed. Unlike news about platforms like Tving getting hacked, this site contains very different types of information, so those aspects are quite worrying.]

Healing Paper, the operator of Gangnam Unni, announced that an abnormal access attempt occurred on the 4th through a system pathway used to view Gangnam Unni consultation histories, resulting in the leakage of customer personal information.

The company explained that after detecting suspicious activity, it blocked the access route, but later confirmed that the same attacker attempted access through another route the following day.

The number of leaked accounts confirmed so far stands at approximately 220,000.

Korean users account for the largest share at 160,000, alongside a significant number of users from Japan, Thailand, and China.

The problem lies in the deeply personal and sensitive nature of the leaked information.

The breached data includes names, phone numbers, and email addresses, as well as consultation procedure names, hospital and doctor names, actual procedure histories, payment amounts and methods, and consultation photos.

Gangnam Unni stated that it has notified affected users of the leak, secured circumstances to identify the attacker, and requested a police investigation.

[Kwak Jin / Professor, Department of Cybersecurity at Ajou University: Precise forms of targeted attacks can occur. When details such as the specific procedures performed and the exact body parts involved are included, it can create a situation where victims are much more easily deceived.]

Experts advise that if users are using the same ID and password for other services as they do for Gangnam Unni, changing them immediately is currently the best way to prevent secondary damage.

(Camera: Hangyul Kim, Video Editing: Hyeyoung Choi, Design: Taeyoung Park)
※ Please note: This article was translated by AI and may contain errors.