SoutSouth Korea’s national data protection agency said on Thursday it had imposed a significant fine on matchmaking service Duo following a cybersecurity failure that led to the leak of highly sensitive personal information.
The compromised data included personal details often required in the South Korean dating market, such as weight, blood type and marital history.
The Personal Information Protection Commission (PIPC) said Duo failed to implement adequate security measures to protect its membership database. It also found the company was slow to respond after hackers breached its systems last year.
The regulator fined Duo 1.21 billion won (£665,000) and ordered it to take immediate corrective action. The company must overhaul its data protection systems and fully disclose technical details of the breach to affected users.
The scale of the breach is significant, given the sensitive nature of the data involved. Hackers gained unauthorised access to Duo’s main database in January last year and downloaded personal information belonging to more than 420,000 current and former members.
In addition to dating-related details, the stolen data included mobile phone numbers, home addresses, university histories and places of work.
The PIPC warned that such information could be used for identity theft, targeted phishing or social extortion.
The investigation also found Duo had breached data retention laws. The company stored highly sensitive information, including 13-digit national identification numbers and passwords, in violation of regulations.
It also failed to delete the dormant data of nearly 300,000 former users, despite a legal requirement to remove such information after five years.
The breach has raised concerns due to Duo’s prominent role in South Korean society. The company is one of the country’s best-known matchmaking services, operating in a culture where many people rely on professional agencies to find partners based on detailed socio-economic and personal criteria.
According to its website, Duo has facilitated more than 53,000 marriages and claims an average of seven couples marry each day through its service. It currently reports around 36,000 paying members.
In response to the ruling, the company issued a public apology. In a statement, Duo said it respected the regulator’s findings and “deeply regrets that we failed to adequately protect our members’ personal data.”
However, it said the breach resulted from a sophisticated “hacking attack that was extremely difficult to detect or prevent”, rather than negligence.
The incident is the latest in a series of major data breaches in South Korea. In recent years, companies across sectors, including e-commerce and telecommunications, have suffered similar incidents due to both cyber attacks and internal misconduct.
The growing number of breaches has prompted public concern and led the government to strengthen enforcement, signalling a tougher approach to data protection.
Ukrainian forces struck a Russian oil refinery in Siberia and a seaport in Dagestan in the past 24 hours, President Volodymyr Zelenskyy s...
Start your day informed with the AnewZ Daily Brief. Here are the top stories for the 10th of September, covering the latest developments about AI a...
Oil has crossed the $100-a-barrel mark again, but for Gulf countries this is not simply good news. Brent reached about $100.07 on Wednesday, its hi...
Four people were killed, including a child, in Ukrainian strikes on the Russian port city of Novorossiysk overnight, according to the governor of the Krasnodar region. Ukraine's drone forces commander, Robert Brovdi, said Russian military ships were destroyed in the attacks.
A TV channel was struck during a live broadcast on Tuesday, Ukrainian President Volodymyr Zelenskyy said, as Russian strikes on Kyiv killed at least three people, the city's Mayor Vitali Klitschko said. Meanwhile, drones hit civilian infrastructure in Russia's southwestern Saratov region.
U.S. Central Command (CENTCOM) said its forces destroyed five Iranian crude oil carriers after the Islamic Revolutionary Guard Corps (IRGC) allegedly launched two ballistic missile attacks against a U.S. Navy warship over the past two days.
Wildfires have broken out in Türkiye’s Antalya province, forcing hundreds of people to evacuate as strong winds fuelled the flames.
Iran’s Revolutionary Guards (IRGC) said on Wednesday they attacked two U.S. vessels and eight oil tankers in the Persian Gulf, calling the strikes a response to a U.S. attack on five Iranian tankers.
Oil has crossed the $100-a-barrel mark again, but for Gulf countries this is not simply good news. Brent reached about $100.07 on Wednesday, its highest level since July, as the U.S.-Iran war and attacks on Saudi energy facilities raised fresh fears about supplies.
Start your day informed with the AnewZ Daily Brief. Here are the top stories for the 10th of September, covering the latest developments about AI and technology.
Ukrainian forces struck a Russian oil refinery in Siberia and a seaport in Dagestan in the past 24 hours, President Volodymyr Zelenskyy said. He will meet Canadian Prime Minister Mark Carney on Thursday to discuss air defences for Ukraine over winter.
U.S. President Donald Trump has pledged to send every American adult a $5,000 payment if the Republicans keep control of the House of Representatives and the Senate in November's midterm elections.
At least five people have died and more than 80 others remain unaccounted for after a passenger ferry caught fire off the western Philippines, prompting a major search-and-rescue operation involving the coast guard, government agencies and local fishing communities.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment