2024 Weverse — Internal staff data misuse
Data compromised
Names; birthdates; phones; purchase history
Technical writeup
Staff member dismissed after illicitly accessing and sharing user data in private chat groups. Exposed: 30 names, birthdates, phones (broadcast event winners), album purchase history. ₩100,000 ($69) platform credits compensation; referred to law enforcement. K-pop platform with 50M users.
Root cause
Internal access control failure; insider misuse