跳到内容
现在

科技 · Chak 数据泄露

Chak 已恢复上线。数据遭暴露的3,083名用户将面临什么？

KOMSCO称，一名外部人员查看了3,083名 Chak 用户的个人信息。服务已经恢复，但入侵原因和后续诈骗风险仍未查明。

文字 阅读需 4 分钟 · 17 个来源

HeyDex

原语言视频

译自英文原文。

当外部人员已经看到用户的个人信息时，恢复一款代金券应用能解决什么问题？韩国的 Chak 平台在采取紧急安全措施后恢复服务，但运营方关于诈骗电话和短信的警告指出了仍未解决的问题：重新开放服务，无法收回他人无权查看的信息。⁠2⁠13

韩国造币与安全印刷公司（KOMSCO）表示，一名未经授权的外部人员访问了其移动本地货币代金券平台 Chak，并查看了属于3,083人的个人信息。这是韩国标准时间2026年11月14日上午6时的评估结果，并非已经确定的最终总数。该公司已致歉，并正在与相关部门调查原因。⁠2⁠3⁠13

3,083截至11月14日评估所涉人数 23
3,072被查看的信息字段不超过两个的人数 23
11被查看的信息字段为三个或四个的人数 23

并非每个人泄露的信息都相同

此次披露中最有用的区分，并非《KBS》标题所说的「约3,000人」与精确数字3,083之间的差异。这两个数字并不矛盾。真正的区别在于不同人暴露的信息各不相同：3,072名用户有两个或更少的信息字段被查看，另有11人有三个或四个字段被查看。仅凭字段数量，客户无法判断自己具体暴露的信息有多敏感。⁠1⁠2

此次事件涉及的信息共有七类：姓名、出生日期、手机号码、银行账号、被称为 CI 的连接信息、电子邮箱地址，以及加密的银行卡号。这是一份涵盖整个事件的清单，并非对每一名受影响用户所遭遇情况的描述。KOMSCO举例说明了两种双字段组合：姓名和出生日期，或 CI 和加密的银行卡号。披露内容并未证实3,083人全部都暴露了银行账号信息。⁠2⁠3

披露内容也没有证实，攻击者获取了可用的未加密银行卡号。该公司称银行卡号经过加密，但现有报道没有解释这种保护的强度，也没有说明入侵者能否破解加密。「加密」是一个相关限定，但现有信息不足以据此确定风险。未经授权查看信息本身也不能证明钱款已被取走。⁠2⁠3

发现入侵不等于入侵开始

KOMSCO称，韩国标准时间11月13日上午9时30分左右，首次发现异常访问迹象。这为调查人员提供了一个时间点，但并未构成完整的时间线。这是该公司察觉异常的时间，并非经核实的外部人员首次入侵时间。现有报道尚未说明访问是如何发生的、持续了多久。⁠2⁠3

据报道，KOMSCO先封锁了疑似攻击 IP 地址，随后全面禁止海外 IP 访问。之后，该公司确认了遭攻击的服务器，暂停受影响的服务，并采取紧急安全措施，然后恢复正常服务。公司没有提供确切的服务恢复时间。封锁海外 IP 是一项遏制措施，不能据此确定攻击者的身份或国籍。⁠2⁠3

KOMSCO还向韩国互联网与安全局（KISA）报告了这一事件，并表示正与相关机构合作，加强系统安全，以防止进一步的未经授权访问和暴露信息遭到滥用。韩联社和《韩国经济日报》刊发的这些详细报道转述了该公司的说法，并非独立发布的技术调查，不能证明数据泄露是如何发生的，也不能证明所有漏洞都已解决。⁠2⁠3

服务中断结束后仍持续的警告

对客户而言，眼下最迫切的问题比平台整体受影响人数更具体：在他们各自的案例中，哪些信息被查看了？KOMSCO表示，正在告知客户已确认的事实、被查看的信息字段，以及防范进一步损害的注意事项。现有报道没有说明这些通知如何送达，也未证实每名受影响者都收到了单独通知。⁠2⁠3

该公司敦促用户特别警惕语音钓鱼和短信钓鱼，即诈骗电话和短信。这一警告针对的是暴露的详细信息可能被用于锁定客户的风险。它并不意味着此类诈骗已经发生，现有报道也没有提供经确认的经济损失评估。⁠13

一名未具名的 KOMSCO 官员表示：「我们向公众深表歉意。」这是对韩联社报道的讲话内容所作的英文翻译。该官员承认，作为受托保护个人信息的公共机构，公司负有责任，并承诺将集中力量防止进一步损害、保护客户。⁠2

道歉承认了责任；调查仍须解释失误是如何发生的。尚待回答的问题很具体：入侵系统的途径、访问持续了多久、受影响人数是否会超过11月14日的评估，以及是否有人滥用暴露的信息。目前尚未确定这项工作的完成日期。服务恢复是运营层面的一个节点，并不意味着对信息被查看的人来说，事件已经结束。⁠2⁠3⁠13

来源16

在此处引用的来源中，Yonhap News Agency最先发布，比本报道播出早8小时。 随后还有12家媒体发布。
  1. Yonhap News Agency
  2. YTN
  3. The Herald Business
  4. 뉴스1
  5. The Asia Business Daily
  6. JKN
  7. Google News 대한민국 (KR:ko)
  8. tvchosun.com
  9. 另有+5家媒体
  10. HeyDay News

3家媒体未注明日期：komsco.com경기일보팍스경제TV

按媒体查看所有来源

来自 16 家媒体的 17 个来源· 引用最多的优先

播出原貌
  1. An outsider viewed personal information belonging to 3,083 Chak users.
  2. South Korea's public voucher platform has restored service, but exposed details could still be used to target its customers. The corporation running it has apologized and warned users about fraudulent calls and texts.
  3. How did the outsider get in, and what risk remains after the service restarted?
  4. Chak is a mobile platform for local-currency vouchers in South Korea. The Korea Minting and Security Printing Corporation, known as KOMSCO, operates it. Its investigation found that someone outside the organization accessed the system without permission and viewed personal information.
  5. The affected population stood at 3,083 at six in the morning on November 14, 2026, Korean time. That gives a precise figure for the earlier description of about three thousand people. The assessment could change as the investigation continues.
  6. Most affected users had only a small number of information fields exposed. But the details varied from person to person, so the overall list of exposed information doesn't tell an individual customer exactly what someone saw about them.
  7. For 3,072 people, the outsider viewed two or fewer information fields. Another 11 people had three or four fields viewed. Those two groups make up the total, and show why the incident's full list shouldn't be applied to every customer.
  8. Some two-field combinations included a name and birth date. Another example paired connecting information, identified as C I, with an encrypted card number. KOMSCO described the card numbers as encrypted, but hasn't explained how strong that protection was.
  9. Names and birth dates were among the exposed details, along with mobile telephone numbers and bank account numbers. The incident also involved connecting information, email addresses and encrypted card numbers. These seven categories describe the exposure across the platform, with different combinations affecting different people.
  10. A person with a name exposed may face a different risk from someone whose account information was viewed. Customers therefore need to know which details were involved in their own case. KOMSCO says it's informing customers about the facts, the information viewed and precautions against further harm.
  11. Subscribe to this channel to follow the Chak investigation and what it finds about the exposed information.
  12. KOMSCO first detected abnormal access at about nine thirty in the morning on November 13. That tells us when it spotted the warning signs. Investigators still have to determine when the outsider first entered the system and how long the access lasted.
  13. KOMSCO blocked internet addresses suspected of involvement, then blocked overseas access altogether. It identified the targeted server and suspended the affected service. After emergency security measures, it restored normal service. The overseas block was part of containment; the attacker's identity remains unknown.
  14. The corporation reported the incident to the Korea Internet and Security Agency, known as KISA, and cooperated with relevant authorities. It says it's strengthening security to prevent further unauthorized access and misuse of the information already exposed.
  15. An unnamed KOMSCO official said, “We deeply apologize to the public.” The official acknowledged the responsibility of a public institution entrusted with personal information, and pledged to focus the corporation's capabilities on protecting customers and preventing further harm.
  16. KOMSCO's warning now reaches beyond the platform itself. It's asking users to be particularly alert to voice phishing and smishing. Those terms mean fraudulent telephone calls and text messages, which could use exposed personal details to target customers.
  17. The warning concerns possible follow-on harm. KOMSCO hasn't announced a confirmed financial-loss assessment or said whether the exposed information has been misused. Restoring the voucher service can't retract personal information that an unauthorized outsider has already viewed.

译文更新于

近期播出