Hana Cupid: break-in at Internet Hana Cupid and Business Hana Cupid leaked up to 4.24 million member records

1. 2026-10-14

   Through 2026-10-15, a third party broke into the management system. [3]

2. 2026-10-19

   The investigation found that member data had leaked. [3]

3. 2026-10-28

   Public disclosure; emails to affected members began. [1] [2]

Up to 4,238,242 records of members who registered an email address on the official online shops leaked, with user IDs, login passwords and PC and mobile email addresses. Former members are included. [1] [3]

Passwords were stored hashed in a form that cannot be turned back, so the company considers quick misuse unlikely. Names, addresses, phone numbers, card numbers and delivery addresses did not leak. Orders on outside shopping malls, by phone or at member florists are not affected. [1]

The company blocked the paths used in the attack and stepped up monitoring. It reported to the Personal Information Protection Commission and the police. It advises members to change their password, and also on other services where they use the same one, and to watch for phishing emails posing as Hana Cupid or banks. It does not plan any payment to members. [1]