Breach · · 3 min read
Hyundai Ezwel, a Korean workplace benefits platform, says member details leaked through an API
Hyundai Ezwel says someone pulled members’ names, birth dates, gender, mobile numbers and emails through a member lookup API. How many people are affected isn’t known yet.
Hyundai Ezwel, part of South Korea’s Hyundai Department Store Group, runs benefits shops (in Korean) that companies and public bodies offer their staff, where employees spend their workplace welfare points. On October 30, 2026, it said member information had leaked. If your employer gives you benefits through Hyundai Ezwel, here’s what the company has said.
What happened
According to Yonhap (in Korean), Hyundai Ezwel posted an apology on its website saying there had been unusual outside access to an API used to look up member information, and that an investigation confirmed member information had leaked. The leaked details are:
- name
- date of birth
- gender
- mobile phone number
- email address
The company says it noticed the unusual access attempts at about 9 p.m. on October 29, Korea time, and immediately blocked the attacking IP address and cut off all outside access to the system. It has reported the incident to the Financial Supervisory Service and the Korea Internet & Security Agency (KISA) and is working with them to find out how it happened and how far it reached. It hasn’t said how many people are affected yet.
Hyundai Ezwel says it hasn’t seen any further harm or misuse of the information so far. It will notify people whose information is confirmed to have leaked individually, and it says it will compensate any confirmed losses in full. A 24-hour support line, 02-3282-0505, opened at 9:30 a.m. on October 31, MBC reported (in Korean). JKN reported the same details in English.
What this means for you
Your name, birth date, phone number and email together are enough for a scammer to sound like your employer’s HR team or the benefits shop itself. Messages about expiring welfare points, a “security check” on your account or a refund are the likely lures. Hyundai Ezwel itself asks people not to click links or download attachments from unknown senders and not to hand over personal details when asked.
What you can do
- Be careful with texts and emails about your welfare points or your Hyundai Ezwel account. Open your company’s benefits shop yourself rather than following a link.
- Never give out passwords or verification codes to someone who contacts you, even if they know your name and birth date.
- Change your password if you reuse it. The company didn’t list passwords as leaked, but reused passwords are the first thing scammers try.
- If you notice anything odd, call Hyundai Ezwel’s 24-hour line at 02-3282-0505.
- Learn the patterns. See how scammers use leaked data.
How Frame helps
Add this breach to a verified email in Frame and Frame shows what it exposed, gives you a short checklist and counts it in your exposure report. Automatic breach lookups aren’t live yet. Frame’s email aliases also let you keep work perks and shopping sign-ups on separate addresses, so one leak doesn’t reach everything. Frame never collects or stores the leaked records themselves.
Sources
- Yonhap News Agency, 현대이지웰서 개인정보 유출 사고…사과문 게시 (in Korean), October 30, 2026
- MBC News, 현대이지웰 개인정보 유출 사고‥"피해 규모 확인 중" (in Korean), October 30, 2026
- JKN, Unauthorized External Access to Hyundai Ezwell Member Information API Leads to Data Breach, October 31, 2026
- Hyundai Department Store Group, 현대이지웰 회사소개 (in Korean)
New posts, by email.
About once a month. Plain-language privacy notes, nothing else. I never share your address.