
A personal data breach has occurred in "Kakao Work," the internal collaboration tool of Kakao Enterprise. The leaked items include names, mobile phone numbers, business email bodies, and original attachments.
On the 12th, Kakao Enterprise announced that on the 9th, an external attacker gained abnormal access to DK Tech, the service provider for Kakao Work, resulting in the leakage of personal information for some users. The leaked items are: △names △nicknames △departments △mobile phone numbers △email addresses △email bodies and subjects △email attachment file names △encrypted messages △attachment file names within messages △original attachments.
The targets of the breach include current and former executives and employees of Kakao Enterprise, external parties who used Kakao Enterprise accounts, and some email recipients. The specific items and scope of leaked information vary by individual. The total scale of the damage has not been disclosed, and an additional investigation is underway to determine the specific details of the leak and its impact range.
DK Tech blocked the external access path immediately after confirming the circumstances of the breach. Kakao Enterprise is also reviewing the security status of its business systems and accounts, and plans to individually notify affected parties of any additional findings.
Kakao Enterprise recommended, "While no password leakage has been confirmed so far, as a proactive security measure to prevent further damage, please change the passwords for related accounts such as Kakao Work and Kakao Enterprise business emails."