South Korean Beauty Platform Unni Hit by Data Breach, Nearly 220,000 Users Affected
Bastillepost · 2 SOURCESabout 2 hours ago2 MIN
Summary
Healing Paper, the operator of South Korea's largest aesthetic and cosmetic surgery platform Unni, disclosed on September 7 that its system suffered a significant cyberattack, compromising the personal data of nearly 220,000 users across multiple countries. The breach was discovered on September 4 when abnormal access patterns were detected in the consultation query function. Although the company immediately severed the access pathway upon discovering the intrusion, a second attack attempt by the same perpetrator through different channels was confirmed on September 5.
Key Points
- The data breach affected 219,665 users globally, with South Korean users comprising the largest group at approximately 160,000, followed by Japan at 48,000 and Taiwan at 4,218
- Exposed information includes names, phone numbers, email addresses, birth dates, gender, country and residential area, social media login IDs, consultation activity names, uploaded photos, procedure details, and payment records
- Unni was founded in 2015 and operates South Korea's largest cosmetic surgery and skin treatment information platform with over 4,900 partner hospitals and more than 3 million consultation cases
- Healing Paper has filed a police report and opened a 30-day inquiry channel on its official website for affected users to verify which of their data was compromised
- The platform warns users to be vigilant against phishing scams impersonating Unni or partner hospitals that may offer fake discounts or request personal and financial information
Why It Matters
This breach highlights the growing vulnerability of health and beauty platforms that store highly sensitive personal and medical information, underscoring the urgent need for stronger cybersecurity measures in the aesthetic industry . For Hong Kong users who may have used the platform or similar services, this incident serves as a stark reminder to limit the sharing of personal data online and to monitor financial accounts for any suspicious activity .
This breach highlights the growing vulnerability of health and beauty platforms that store highly sensitive personal and medical information, underscoring the urgent need for stronger cybersecurity measures in the aesthetic industry . For Hong Kong users who may have used the platform or similar services, this incident serves as a stark reminder to limit the sharing of personal data online and to monitor financial accounts for any suspicious activity .