{
  "id": 17762013,
  "title": "HYBE data breach exposes employee medical records, financial details",
  "url": "https://urgent.news/2026/11/02/hybe-data-breach-exposes-employee-medical-records-financial-details",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-02T07:27:03.000Z",
  "source": {
    "name": "The Korea Times",
    "slug": "the-korea-times",
    "url": "https://www.koreatimes.co.kr/entertainment/k-pop/20261102/hybe-data-breach-exposes-employee-medical-records-financial-details"
  },
  "original_language": "en",
  "account": "HYBE, the music agency responsible for K-pop sensation BTS, recently announced a cyberattack that resulted in the exposure of sensitive personal data belonging to both present and former employees as well as business associates. This information breach includes details such as resident registration numbers, credit card numbers, and medical records.\n\nIn an apology posted on their official website on October 18th, HYBE detailed the incident, revealing that the unauthorized access was initially discovered through an internal security inspection conducted on their electronic approval system, which utilized document preview software from an external vendor. Upon further scrutiny, the company found that similar unauthorized access had occurred to their expense management system.\n\nThe unauthorized access took place between September 12th and 13th, as well as October 3rd and 5th. The compromised information also included passport numbers, bank account details, residential addresses, and telephone numbers. Nevertheless, HYBE has not disclosed the exact number of individuals affected by the breach.\n\nIn response to the incident, the company has taken immediate action. They have blocked the attackers' internet addresses and access routes, reported the incident to relevant authorities, including the Korea Internet and Security Agency and the Personal Information Protection Commission, and is actively working to mitigate any potential damage caused by the breach.",
  "summary": "HYBE, the music agency behind K-pop group BTS, disclosed a cyberattack that exposed personal information of current and former employees and business partners, including resident registration numbers, credit card numbers and medical records. In an apology posted on its website, Oct. 18, the company said an internal security inspection detected unauthorized access through an outside vendor’s…",
  "key_points": [
    "HYBE experienced a cyberattack exposing employee and associate data.",
    "Sensitive information includes medical records, credit card numbers.",
    "Incident discovered via internal security inspection on September 12th."
  ],
  "editors_take": "The vulnerability in third-party document software exposes how reliance on external vendors can turn routine administrative tools into critical entry points for massive leaks of sensitive employee data.",
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}