220,000 Users' Sensitive Data Leaked from Gangnam Unni... Hackers Targeted System Again After Being Blocked

[Anchor]

Personal information of 220,000 users has been leaked from Gangnam Unni, South Korea's largest medical aesthetics information platform. Because the breach includes highly sensitive data such as individual procedure histories and consultation photos in addition to names and phone numbers, concerns over secondary damage are growing.

Reporter Kwon Ran has the details.

[Reporter]

User A, who has used the medical aesthetics platform Gangnam Unni for over five years and frequently posted procedure reviews, felt a wave of anxiety upon hearing the news of the personal data leak.

[User A / Gangnam Unni Data Leak Victim: It is a bit embarrassing to admit having certain procedures done, and details like that might have been exposed. Unlike news about platforms like Tving being breached, this site contains entirely different kinds of information, so that part is quite concerning.]

Healing Paper, the operator of Gangnam Unni, announced that on the 4th, abnormal access occurred in a system pathway used to view Gangnam Unni consultation records, resulting in the leakage of customer personal information.

The company explained that after detecting abnormal signs, it blocked the access route, but later confirmed that the same attacker attempted access through another path the next day.

The number of leaked accounts confirmed so far is approximately 220,000.

Korean users account for the largest share at 160,000, alongside a significant number of users from Japan, Thailand, and China.

The problem lies in how extremely personal and sensitive the leaked information is.

It includes names, phone numbers, and email addresses, as well as consultation procedure names, hospital and doctor names, actual procedure histories, payment amounts and methods, and even consultation photos.

Gangnam Unni stated that it has notified users of the leak, secured circumstances that can identify the attacker, and requested a police investigation.

[Kwak Jin / Professor of Cybersecurity at Ajou University: Precise, targeted attacks can occur. When details such as the specific procedures performed and exact body areas are included, it can create a situation where victims are much more easily deceived.]

Experts advise that if users are using the same ID and password on Gangnam Unni as on other services, changing them immediately is currently the best way to prevent additional damage.

(Video by Hangyul Kim | Video Editing by Choi Hye-young | Graphics by Park Taeyoung)
※ Please note: This article was translated by AI and may contain errors.