LY Corporation: contractor accounts misused; 57,611 staff-related records may have leaked

LY Corporation announced on 14 February 2024 that accounts of two contractors of the company and a subsidiary had been misused and that its systems had been accessed without authorization by a third party. It is separate from the unauthorized access disclosed on 27 November 2023 and was found during the investigation of that case and stepped-up monitoring. There were traces of unauthorized access to systems holding employee data, and 57,611 personal records (including an estimated 51,224) about staff of the company, group and affiliated companies, contractors and staffing agencies, such as names, organizations, email addresses, phone numbers, employee numbers and face photos, may have leaked. The count is of accounts and contains duplicates. No leak of user or business partner data was found. According to ITmedia Enterprise, the unauthorized access using a contractor account began on 7 August 2023.