API hacks hit South Korea platforms, exposing hundreds of thousands

The incident affected the aesthetic medical platform Gangnam Unnie, operated by Healing Paper, after attackers exploited an API vulnerability. The company said the abnormal access occurred on September 4, and it detected signs the same attacker tried again through a different path the next day. According to the report, the leak involved 219,665 customers across South Korea and overseas markets. Exposed data included names, contact information, consultation photos, preferred reservation times, consultation motives, practitioner identifiers, and procedure/payment-related information.