{
  "id": 17765325,
  "title": "HYBE data breach exposes employee medical records, financial details",
  "url": "https://urgent.news/2026/11/02/hybe-data-breach-exposes-employee-medical-records-financial-details-17765325",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-11-02T07:57:02.000Z",
  "source": {
    "name": "The Korea Times",
    "slug": "the-korea-times-koreatimes",
    "url": "https://www.koreatimes.co.kr/entertainment/k-pop/20261102/hybe-data-breach-exposes-employee-medical-records-financial-details"
  },
  "original_language": "en",
  "account": "HYBE, the music agency responsible for K-pop sensation BTS, announced on October 18 that a cyberattack had compromised the personal information of current and former employees and business partners. The leaked data included sensitive details such as resident registration numbers, credit card numbers, and medical records.\n\nIn a statement on their website, HYBE acknowledged that the breach occurred between September 12-13 and October 3-5. The unauthorized access was traced back to an external vendor's document preview software integrated with HYBE's electronic approval system. Further probing revealed similar breaches in their expense management system.\n\nThe compromised information also encompassed passport numbers, bank account details, residential addresses, and phone numbers. However, the company did not specify the exact number of individuals affected by the breach.\n\nHYBE expressed deep regret for the distress caused by the leak of personal information. In response to the incident, the company took immediate action, blocking the attackers' internet addresses and access routes. They also reported the incident to relevant authorities, including the Korea Internet and Security Agency and the Personal Information Protection Commission.",
  "summary": "HYBE, the music agency behind K-pop group BTS, disclosed a cyberattack that exposed personal information of current and former employees and business partners, including resident registration numbers, credit card numbers and medical records. In an apology posted on its website, Oct. 18, the company said an internal security inspection detected unauthorized access through an outside vendor’s…",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}