'Daeguro' where 25,000 account numbers were stolen... Franchise owners will be notified four days later (comprehensive)

The Daegu public delivery app 'Daeguro' was hacked, resulting in a large-scale leak and exposure of information, including the system access information of the operator's employees and the account numbers of franchise owners.

The operator reported the accident to the police the day after it occurred and took security measures, but franchise owners were notified of the damage four days after the accident.

According to Daegu City and Inseong Data, the operator of Daegu-ro, on the 5th, a security incident occurred on the Daegu-ro server on the 31st of last month.

As a result of this incident, it was discovered that the IDs and passwords for accessing the Daeguro system of about 250 current and former employees of Inseong Data were leaked.

Additionally, it was discovered that about 25,000 account numbers of store owners, including those who closed their businesses, were exposed.

Immediately after becoming aware of the security incident, Inseong Data conducted an emergency system inspection on the 1st and reported the damage to the Daegu Police Agency. On the 2nd, the Korea Internet & Security Agency (KISA) was notified of the infringement.

Inseong Data suspects that hacking occurred through the system that processes affiliate signups, and has currently stopped accepting new affiliates.

Employees' IDs and passwords were reset.

Additionally, to prevent financial damage, the withdrawal system within Daegu was temporarily controlled on the 2nd and resumed after inspection.

To prevent recurrence of damage, we are working to strengthen security by diversifying internal system access paths.

An official from the company said, "We are investigating the circumstances of the hacking, and we estimate that information was stolen in an instant using artificial intelligence (AI) technology."

He said, “We also notified franchise store owners of the damage on the 4th,” and added, “To date, no financial damage has been confirmed.”

He also said, “Daegu does not request changes to the settlement account or asks for passwords or authentication numbers by phone or text,” and added, “If you receive such a call, please notify the Daegu customer service center.”

A city official said, "We are aware of the damage situation with the company and are asking them to respond well to prevent secondary damage."

Daeguro was released in August 2021. The cumulative number of affiliated stores is approximately 25,000 and the cumulative number of members is 740,000.