Kakao Games apologizes for personal information leak... “Beware of contact from impersonators.”

Partners and RINK company identification and country code leaked... “Beware of contact from impersonators.”

(Seoul = Yonhap News) Reporter Sang-yong Han = Kakao Games [293490] apologized for the leak of personal information of some users.

Kakao Games announced on its website on the 17th, "We sincerely apologize for any inconvenience caused regarding the protection of personal information. If necessary, depending on the results of the future investigation, we will implement additional protective measures and measures to prevent recurrence."

Kakao Games determined that the personal information of 140 customers was leaked due to abnormal external access to Partners and RINK services.

According to Kakao Games, the attack is believed to have occurred between 10:44 PM on the 12th and 7:37 PM on the 13th.

After confirming the abnormal access on the day of the incident, Kakao Games discovered that personal information had been leaked at 0:50 a.m. on the 14th during the investigation.

The leaked information is a third-party identification code or third-party ID for external linkage of the Partners service, and the RINK service's own identification code and some country codes.

Kakao Games said that the identification code and country code are personal information that has a low risk of being misused because it is difficult to identify individuals.

He also added that in some cases where IDs for external linking were leaked, passwords were not included.

Kakao Games reported that the attacker took advantage of vulnerabilities in the two systems to gain abnormal access and reported it to relevant agencies such as the Personal Information Protection Commission.

The cause of the accident and the exact scope of its impact are also being investigated with an external security agency.

Kakao Games urged users not to open links or attachments in text messages or emails from unknown sources, and to be cautious of impersonator contacts requesting passwords, authentication numbers, or account information.