Gangnam Unni platform suffers data breach affecting 220,000 users

Healing Paper, the operator of the medical beauty platform Gangnam Unni, has reported a personal information leak affecting approximately 219,665 users globally. The breach occurred following abnormal access to an API used for retrieving consultation details on June 4. Despite immediate efforts to block the access path, attackers attempted a second intrusion via a different route on June 5.

The leaked data is extensive, including names, phone numbers, email addresses, dates of birth, gender, and social media login IDs. Critically, the breach includes sensitive medical information such as consultation history, requested procedures, hospital names, doctor names, appointment times, consultation photos, and payment details.

The affected user base spans several countries, with approximately 160,000 users in South Korea, 48,000 in Japan, 4,218 in Taiwan, 1,591 in Thailand, 481 in China, and over 5,000 from English-speaking and other regions.

Healing Paper has reported the incident to the Korea Internet & Security Agency (KISA) and has filed a request for investigation with the police to identify the attackers. The company has notified affected individuals and implemented technical measures, including strengthened authentication and enhanced detection systems, to prevent further incidents.