Gabia Hacking Exposes Personal Data of 2,998 Customers
Personal information of 2,998 Gabia customers has been leaked. Gabia, a cloud and internet infrastructure company, disclosed that an unauthorized intrusion by an external attacker led to the leak of some customers' personal information on the 21st. The company announced the incident on its website on the 23rd.
The attack occurred at around 11:45 a.m. on the 21st. An investigation found that the external attacker gained access to internal systems through a specific feature of Gabia's web service. The feature failed to sufficiently validate external requests, allowing abnormal requests to slip through, which were ultimately exploited as a gateway into internal systems.
Gabia detected the suspicious activity after 1:05 p.m. the same day and blocked the external access route and related accounts used in the attack, while strengthening system access controls. As of 3 p.m. on the 23rd, 2,998 customers have been confirmed as victims of the personal data leak. The leaked information includes names, user IDs, email addresses, and mobile phone numbers. Passwords have not been confirmed as compromised so far. However, the company cautioned that the number of affected individuals and the scope of leaked data could change as the investigation continues.
Gabia is addressing the vulnerabilities related to the incident while also checking whether similar security flaws exist in other systems. The company is simultaneously preserving logs and evidence and checking for any additional unauthorized access.
Gabia reported the security breach to the Korea Internet & Security Agency (KISA) and notified the Personal Information Protection Commission of the leak. Affected customers will be notified individually via email or text message.
"As a company that must place the protection of customer information above all else, we feel a deep sense of responsibility for this incident," Gabia said, adding, "We will conduct a comprehensive review of our security systems to ensure such problems do not recur."
