Personal data of nearly 220,000 users leaked from South Korean beauty platform

Nearly 220,000 users of Gangnam Unni, a major beauty-medical platform, have had personal information exposed. The confirmed number of affected users is 219,665, with South Korean users accounting for about 160,000 of them.

The breach involved more than names and contact details. It included consultation records, the procedures and hospitals discussed, uploaded photographs, actual treatment details and payment information. The platform also holds basic data such as telephone numbers, email addresses and dates of birth.

Healing Paper, the company that operates Gangnam Unni, said an abnormal external access attempt reached the system used to retrieve users’ consultation records on the fourth. After detecting the warning signs, the company blocked the access route. It later confirmed that the same attacker had attempted to gain access through another route on the fifth.

Users outside South Korea were also affected, including about 48,000 in Japan, 4,218 in Taiwan, 1,591 in Thailand and 481 in China. Because Gangnam Unni provides information on skin treatments and cosmetic surgery, the exposed records contain particularly sensitive personal information.