SM Entertainment (hereinafter SM) and its major affiliates experienced a data breach due to an external hacking attack, resulting in the leakage of personal information.
On November 8th, SM announced on its official website, “During recent internal security monitoring, we confirmed that an external attacker accessed our business systems (electronic approval systems, etc.) without authorization and leaked some stored document files externally.”
According to SM, the breach occurred around the 4th. The leaked information includes names, addresses, mobile phone numbers, bank account numbers, affiliations (department/position/title), and some details listed in contracts.
SM stated, “The specific leaked items vary by individual, and we are currently identifying the exact affected individuals and information to notify each one sequentially via email or text message.”
They added, “Upon recognizing the incident, we immediately blocked the IP and access routes used in the attack and replaced unauthorized access keys to prevent further attacks and information leaks. Additionally, we will implement further necessary measures, including a thorough investigation in cooperation with government authorities and external experts, and a review of our security system to prevent damage.”
SM continued, “So far, there have been no confirmed secondary damages caused by the leaked personal information, but to prevent possible harm such as voice phishing or smishing, we ask you to be cautious by following the guidelines below. We take this incident very seriously and will strengthen access controls and security monitoring within the company, thoroughly identify causes, and improve our security system to prevent a recurrence. We sincerely apologize once again.“