South Korean Matchmaking Service Duo Fined After Infostealer Breach Exposed 427,464 Members’ Data
Summary
South Korea’s PIPC fined matchmaking firm Duo 1.197 billion won plus 13.2 million won after an infostealer-led January 2025 breach exposed 427,464 members’ personal data, including passwords and resident registration numbers.
Key points
- South Korea’s Personal Information Protection Commission (PIPC) fined Duo 1.197 billion won and imposed an additional 13.2 million won administrative penalty.
- An infostealer on an employee’s work computer reportedly enabled an attacker to steal database credentials, access Duo’s member database and exfiltrate data that was later published on the dark web.
- The exposed information reportedly included login IDs, passwords, resident registration numbers, names, birth dates, contact details, education, financial information and physical characteristics.
- PIPC found Duo failed to encrypt resident registration numbers and passwords, restrict database access after repeated failed logins, destroy 298,556 expired records, and establish a legal basis for collecting resident registration numbers.
- PIPC said Duo delayed reporting the leak by 72 hours and had not notified affected members; it ordered the company to notify them, publish breach information and strengthen security measures.
- Duo apologized and said it had deleted resident registration numbers and implemented corrective measures; it said individual notifications would begin after it received PIPC’s official results.
Article Details
- Victim Organization
- Duo
- Incident Type
- Infostealer-enabled data breach involving theft of database credentials, unauthorized access to the member database, and exfiltration of personal information
- Incident Date
- 2025-01-28
- Data Types Exposed
- Login IDs
- Passwords
- Names
- Dates of birth
- Resident registration numbers
- Gender
- Email addresses
- Phone numbers
- Addresses
- Educational background
- Physical characteristics, including height, weight, and blood type
- Relationship status
- Professional information
- Financial information
- Affected Records
- Up to 427,464 members
- Operational Impact
- Member data was exfiltrated and leaked on the dark web. PIPC ordered Duo to notify affected members, publish breach information, and strengthen security measures. Duo reported deleting resident registration numbers and implementing corrective security measures. No service outage was reported.
- Ransom Or Extortion
- Unknown
- Claim Status
- confirmed