"Even photos before plastic surgery were leaked..." 'Gangnam Unni' to compensate 220,000 users with 50,000 won in points

[For more diverse corporate information on the startup mentioned in this article, please visit the Unicorn Factory big data platform 'Data Lab'.]

Healing Paper (힐링페이퍼), the operator of the medical beauty platform 'Gangnam Unni', has prepared a compensation plan offering 50,000 won in points and financial fraud compensation insurance up to 10 million won to customers affected by a personal information leak incident.

Healing Paper issued a second statement late yesterday, stating, "We sincerely apologize to all customers who have experienced great worry and inconvenience due to this personal information leak incident," and announced the compensation plan.

Domestic affected customers will receive 50,000 won in Gangnam Unni points per person. Compensation applications will be accepted starting at 10 a.m. on the 10th via the compensation application link within the Gangnam Unni app. Details regarding the scale and payment schedule for overseas affected customers will be announced later.

The company also provides insurance to cover financial losses resulting from hacking or phishing due to personal information leaks. The coverage limit is up to 10 million won per person, with a coverage period of one year.

Healing Paper explained, "We do not take this incident lightly and are doing everything possible to strengthen additional system and database security and monitoring to prevent secondary damage and recurrence of the incident." It added, "Immediately after recognizing the incident, we blocked the problematic access routes and conducted a full system inspection."

Specifically, the company has comprehensively strengthened its authentication and access control systems to prevent recurrence. It has restructured multi-step authentication procedures for all logins and API calls and rebuilt authorization verification logic to block abnormal access in advance. The real-time anomaly monitoring system has also been upgraded. A response system has been established to immediately detect and block similar access patterns or repeated attack attempts.

In addition, a comprehensive security inspection is being conducted on all APIs and databases handling consultation, payment, and procedure information. Vulnerability checks and penetration testing are also underway in collaboration with external security professional institutional investors.

Previously, Healing Paper announced via notice on the 7th that abnormal access occurred to an API used to view consultation records on the 4th, resulting in a leak of some customers' personal information.

According to Healing Paper, the total number of affected individuals is 219,665. South Korea has the highest number with approximately 160,000 users, followed by Japan with 48,000, Taiwan with 4,218, Thailand with 1,591, China with 481, and English-speaking countries and other nations with 5,308.

The leaked information includes basic personal data such as names, resident registration numbers, dates of birth, and gender, as well as consultation medical institutional investor information, consultation application details, procedure or surgery status and scheduled dates, and desired procedure information. For some users, photos registered during the consultation process and consultation motivations were also leaked.

Healing Paper stated that individual notifications have been sent to affected users and that they can view their own leaked items on the Gangnam Unni website for 30 days.

Healing Paper reported the security incident to the Korea Internet & Security Agency (KISA) on the 6th and completed the personal information leak report on the following day, the 7th. To identify the attackers precisely and prevent recurrence, a cybercrime investigation has been requested from the local police station.

Hong Seung-il, CEO of Healing Paper, stated, "We will take this incident as a painful lesson and continuously strengthen protective measures in accordance with information security investment and management system certification (ISMS) standards." He added, "We will transparently guide the improvement process and progress without hiding anything."

[MoneyToday startup media platform Unicorn Factory]