Tech · Chak data breachchak data leak: 3,083 users exposed as South Korea's voucher platform restores serviceAired November 14, 2026 at 4:38 PM UTCWatchTranscript0:07An outsider viewed personal information belonging to380 3 CHAC users South Korea's0:12public voucher platform has restored service, but exposed details could still be0:16used to target its customers.0:17The corporation running it has apologized and warned users about fraudulent calls0:21and texts.0:22How did the outsider get in?0:23And what risk remains after the service restarted?0:26Shack is a mobile platform for local currency vouchers in South Korea.0:29The Korea Minting and Security Printing Corporation, known as COMSCO, operates it.0:34Its investigation found that someone outside the organization accessed the system0:37without permission and viewed personal information.0:40The affected population stood at three eighty, three at six in the morning on0:43November14,2026 , Korean time.0:47That gives a precise figure for the earlier description of about3 ,000 people.0:50The assessment could change as the investigation continues.0:53Most affected users had only a small number of information fields exposed, but the0:57details varied from person to person.0:59So the overall list of exposed information doesn't tell an individual customer1:03exactly what someone saw about them.1:05For three hundred and seventy, two people.1:07The outsider viewed two or fewer information fields.1:10Another eleven people had three or four fields viewed.1:12Those two groups make up the total and show why the incident's full list shouldn't1:16be applied to every customer.1:18Some too field combinations included a name and birth date.1:21Another example paired connecting information, identified as CI with an encrypted1:25card number.1:26Comsco described the card numbers as encrypted, but hasn't explained how strong that1:30protection was.1:31Names and birth dates were among the exposed details, along with mobile telephone1:35numbers and bank account numbers.1:36The incident also involved connecting information, email addresses, and encrypted1:41card numbers.1:42These seven categories describe the exposure across the platform, with different1:45combinations affecting different people.1:47A person with a name exposed may face a different risk from someone whose account1:51information was viewed.1:52Customers therefore need to know which details were involved in their own case.1:55Comsco says it's informing customers about the facts, the information viewed, and1:59precautions against further harm.2:01Subscribe to this channel to follow the chat investigation and what it finds about2:05the exposed information.2:06COMSCO first detected abnormal access at about nine thirty in the morning on2:10November13.2:11That tells us when it spotted the warning signs.2:13Investigators still have to determine when the outsider first entered the system and2:17how long the access lasted.2:18ComSco blocked internet addresses suspected of involvement, then blocked overseas2:23access altogether.2:24It identified the targeted server and suspended the affected service.2:28After emergency security measures, it restored normal service.2:31The overseas block was part of containment.2:33The attacker's identity remains unknown.2:35The corporation reported the incident to the Korea Internet and Security Agency,2:39known as KISA, and cooperated with relevant authorities.2:42It says it's strengthening security to prevent further unauthorized access and2:46misuse of the information already exposed.2:48An unnamed COMSCO official said, We deeply apologize to the public.2:52The official acknowledged the responsibility of a public institution entrusted with2:56personal information, and pledged to focus the corporation's capabilities on3:00protecting customers and preventing further harm.3:02ComSco's warning now reaches beyond the platform itself.3:05It's asking users to be particularly alert to voice phishing and smmishing.3:09Those terms mean fraudulent telephone calls and text messages, which could use3:13exposed personal details to target customers.3:16The warning concerns possible follow on harm.3:18Comsco hasn't announced a confirmed financial loss assessment or said whether the3:22exposed information has been misused.3:23Restoring the voucher service can't retract personal information that an3:27unauthorized outsider has already viewed.Story timelineHeyDex
