VML Subsidiary Leak Exposes Driver and Passenger Records

In late 2023, it was discovered that a misconfiguration in the administrative dashboard of VML (the operator of the TADA ride-hailing service under Kakao Mobility) allowed unauthorized access to sensitive records. Exposed data included passenger trip logs and driver registration details. The PIPC subsequently investigated the parent company’s data management practices.