2026 Kakao Work — DK Techin hack; ~5,000 at 44 firms

Data compromised

Names, nicknames, departments, mobile numbers, email addresses, email subject and body, email attachment names, original attachments, encrypted chat messages, chat attachment names, and original chat attachments. Mix varies by person. Kakao Enterprise notice covers its staff, external people on its accounts, and some mail recipients. Lookup page at DK Techin. recordsAffected 5000 as Asiae approximate.

Technical writeup

Root cause

DK Techin, Kakao Work licence provider, said an external attacker gained abnormal access to the Kakao Work system on 9 November 2026. Kakao Enterprise posted a tenant notice on 12 November. Asiae: about 5,000 users at 44 client companies. Reported to KISA and PIPC. Access path unpublished. Kakao holds operational authority; DK Techin is the licence provider. Passwords not confirmed leaked.

References

• https://kakaoenterprise.com/notice/%ec%b9%b4%ec%b9%b4%ec%98%a4%ec%9b%8c-%ec%84%9c%eb%b9%84%ec%8a%a4-%ea%b0%9c%ec%9d%b8%ec%a0%95%eb%b3%b4-%ec%9c%a0%ec%b6%9c-%ea%b4%80%eb%a0%a8-%ec%95%88%eb%82%b4/
• https://www.asiae.co.kr/en/article/2026111309090565452