South Korea·Tech·Announced by the organization or a regulator
Incruit data breach (Sep 2020)
What happened
Incruit suffered a credential stuffing attack that allowed unauthorized access to many member accounts and exposed personal information such as photos, names, birth dates, gender, contact details, email, address, and education history. The breach occurred due to lack of mass login blocking and missing additional authentication for dormant account reactivation, leading to a fine.
This page summarizes and translates our record written in Korean. Counts and dates come from that record unchanged. Read the original record →
Facts on record
- Country
- South Korea
- Industry
- Tech
- Announced
- Sep 30, 2020
- Affected
- 35,076 people
- Data exposed
- Addresses, email addresses, phone numbers, names
- Status
- Announced by the organization or a regulator
- Compensation and penalties
- A fine or other penalty on record