Personal data belonging to 140 Kakao Games customers has been leaked. The company is investigating the hacking incident, and the scope of the damage could expand depending on the findings.
Kakao Games announced on its website that it detected unauthorized access to its Partners and RINK services at 10:44 p.m. on Saturday and confirmed Monday that the personal information of 140 customers of those services had been leaked.
The compromised data includes third-party identification codes or IDs used for external linkage through the Partners service, as well as the company's own identification codes and, in some cases, country codes.
Kakao Games said the identification codes for external linkage, its own identification codes and country codes "are personal information with a low risk of misuse, as they make it difficult to identify specific individuals." It added that even in cases where external-linkage IDs were leaked, passwords were not compromised.
The company said it has taken a series of response measures: blocking the unauthorized external access route and related accounts; blocking further access to the affected systems and strengthening security; securing logs and evidence related to the incident; inspecting and patching vulnerabilities; investigating whether additional personal data was leaked; enhancing monitoring for anomalies in related systems; reporting the incident to the Personal Information Protection Commission and relevant authorities; and conducting an investigation into the cause and scope of the incident with an external cybersecurity firm.
As the hacking investigation is still ongoing, the possibility that the scope of damage could expand cannot be ruled out.
Kakao Games said an investigation into whether additional personal data was leaked is underway as part of its response measures, adding that it is "conducting an investigation into the cause of the incident and the precise scope of the damage."
ko@heraldcorp.com
