NEXTLEVEL: worker database accessed without authorization through an admin screen, and 496,119 personal data records leaked

1. 2023-07-14

   A third party told it that personal data of some workers had leaked. Investigation found unauthorized access to the worker database through an admin screen granted to a member company of the platform. It suspended the member company's account at once. [1]

2. 2023-11-01

   It reported to the Personal Information Protection Commission under the Act on the Protection of Personal Information and notified the workers whose email addresses it had. [1]

3. 2024-05-24

   It announced the case and apologized for the delay in notifying people. [1] [2]

The data of 496,119 workers is covered: IDs, names, genders, birth dates, addresses, phone numbers, email addresses, bank account data, work history and conditions, qualifications, emergency contacts, and link URLs to ID photo data. It does not hold My Number. After the discovery, someone who said they had obtained the data contacted it, and it got a USB memory back at a police station, but it cannot confirm that no copy was made. [1] [2]