SM Entertainment Apologizes After Hackers Steal Employee Data, Including Resident Registration Numbers
SM Entertainment says an outside attacker broke into its internal business systems around Nov. 4 KST and took documents containing employees' personal data, with affiliates DearU and Dreammaker Entertainment also hit.
SM Entertainment has apologized after a cyberattack exposed the personal data of its staff. The agency said in a notice on its website that an outside attacker got into its business systems, including its electronic approval system, and took some stored documents around Nov. 4 KST.
The leaked items include mobile phone numbers, addresses, bank account numbers, resident registration numbers, affiliations and information written in contracts, SM said. Two affiliates were also hit: concert production company Dreammaker Entertainment and DearU, the operator of the fan-messaging app Bubble. DearU said only employee records were involved, according to The Herald Business.
SM said it blocked the IP addresses and routes used in the attack, replaced the access keys, and is investigating with the authorities and outside security specialists. It said no misuse of the data has been confirmed so far, but warned people to watch for calls, texts or emails impersonating SM that ask for money or financial details. "We sincerely apologize for causing concern due to this incident," the company said, as translated by SBS.
The breach comes weeks after HYBE disclosed on Oct. 18 that its own electronic approval system had been breached, exposing data of current and former employees and business partners, The Herald Business reports.
Confirmed
- In a notice on its website, SM Entertainment said internal security monitoring found that an external attacker accessed its business systems, including its electronic approval system, without authorization and took some stored document files.
- SM said the leak happened around Nov. 4 and the exposed items include mobile phone numbers, addresses, bank account numbers, resident registration numbers, affiliations and information written in contracts.
- SM said it blocked the IP addresses and access routes used in the attack, replaced the access keys, and is investigating with the relevant authorities. It said no secondary damage from misuse of the data has been confirmed so far.
Reported by other outlets
- The Herald Business reports DearU, which runs the fan-messaging app Bubble, said the breach was limited to employee records and there is no sign Bubble user data was affected.
- The Asia Business Daily reports SM said fan information was not leaked and that the incident was reported to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission.
- The Herald Business reports SM did not disclose how many people were affected, how many documents were taken, or how the attacker got in.