A data breach involving user personal information has occurred on the travel platform MyRealTrip due to unauthorized external access.

MyRealTrip announced today (October 29) that it confirmed on October 25 that an unauthorized external party abnormally accessed its system, leading to a leak of user personal information.

The leaked information includes names, email addresses, mobile phone numbers, dates of birth, genders, encrypted passwords, passport numbers, and passport expiration dates.

However, the company added that passport numbers and passport expiration dates were leaked for only some users, and that payment method details such as credit card information, reservation histories, and purchase records were not included in the leaked items.

MyRealTrip advised that the specific leaked personal information items may vary by user, and users can check whether their personal information was leaked and which items were affected on the company website.

MyRealTrip explained that immediately after confirming the leak, it blocked the abnormal access, inspected and reinforced related systems, and is continuously monitoring the situation by strengthening detection and blocking mechanisms.

In accordance with relevant laws and regulations, the company has also reported the incident to the relevant authorities, and plans to cooperate with future investigations and provide follow-up guidance if additional details are confirmed.

Stating that damages such as identity theft, voice phishing, and smishing could occur by exploiting the leaked personal information, MyRealTrip urged users not to click links in suspicious text messages or emails and to change their passwords.

Additionally, the company advised that users who have suffered damage due to the personal information leak can seek remedy through procedures such as filing for damages or applying for personal information dispute mediation.

(Photo: Provided by MyRealTrip, Yonhap News)