Gunosy: a stolen work account was used to get into its cloud and business tools; data of 132 partners and staff leaked

1. 2026-10-21

   In the afternoon, someone logged in with the ID and password of an internal work account and reached the cloud environment and business tools used for its services and internal work. The monitoring system caught it, and the account was stopped the same day. [1]

2. 2026-10-23

   Reported to the Personal Information Protection Commission. [1]

3. 2026-10-26

   Disclosed, and began emailing the affected people. [1]

• 25 partner contacts: names, email addresses and the company, department, title and contact details in signatures of emails exchanged with the account. The text of some emails was read, but there is no record of attachments being opened. [1]
• 107 directors, employees, former employees and others: names and email addresses, for some also the contact registered for account recovery. [1]

No data of users of its services, such as the Gunosy news app, leaked. How the credentials were stolen is still being investigated. [1]

Related credentials were disabled and changed. Shared accounts will be removed, multi-factor authentication enforced and permissions reviewed. It warns partners to be wary of requests to change bank details. [1]