Vook: database accessed through a data analysis tool flaw

1. 2026-10-14

   An internal check found a suspicious account in its data analysis tool that Vook had not created. [1]

2. 2026-10-22

   It confirmed that a third party had likely used a flaw in the tool to reach the database and take data. It invalidated all members' login credentials and changed the database connection credentials. [1]

3. 2026-10-30

   It published its first report; it has reported to the Personal Information Protection Commission and consulted the police. [1]

Members, event applicants, people who contacted Vook and contacts at partner and client companies are affected. Names, email addresses, phone numbers, addresses, dates of birth, employers, parts of career and education histories, the invalidated login credentials, viewing passwords of posted works and IP addresses may be included. The tool could only read data and no tampering was found. The number of people is still being checked. Card and bank data and members' login passwords were not included. [1]