Confirmed breach

HYBE data breach

KRSouth Korea

Saostar, cineplay and Star News Korea reported a data breach at HYBE (South Korea) on 2 November 2026, and it has been confirmed.

People affected: Not reportedno count given yet
Reported: 2 November 2026News report and 2 more

What was exposed 11

Passport numbers
Government ID numbers
Financial account and card details
Email addresses
Phone numbers
Dates of birth
Names
Addresses

Show 3 more

Resident registration numbers
Foreign registration numbers
Landline numbers

How it happened

How: Hacking Hackers infiltrated the document preview solution of an external provider, connected to the electronic approval system. That's not all, a similar attack was also discovered in the internal expense processing system. source
Our translation from Vietnamese
tin tặc đã xâm nhập vào giải pháp xem trước tài liệu của một nhà cung cấp bên ngoài, được kết nối với hệ thống phê duyệt điện tử. Không dừng lại ở đó, một cuộc tấn công tương tự cũng được phát hiện tại hệ thống xử lý chi phí nội bộ
Way in: document preview solution of an external provider Document preview solution of an external provider, connected to the electronic approval system source
Our translation from Vietnamese
giải pháp xem trước tài liệu của một nhà cung cấp bên ngoài, được kết nối với hệ thống phê duyệt điện tử

Sources 3

News reportSaostarBTS and NewJeans management company apologizes for large-scale data leak incident (our translation from Vietnamese)2 November 2026
Confirmed by HYBE: HYBE officially apologized after discovering signs of unauthorized access from outside to its internal systems.
Our translation from Vietnamese
HYBE đã chính thức lên tiếng xin lỗi sau khi phát hiện những dấu hiệu truy cập trái phép từ bên ngoài vào hệ thống nội bộ
News reportcineplayHYBE: employee passports and account numbers compromised… "We present our sincere apologies" after personal data leak (our translation from French)2 November 2026
News reportStar News KoreaHYBE suffered a cyberattack… "Apologies" for the data leak of personal information of related people (our translation from Spanish)2 November 2026

News reports are read by an AI model; every fact taken from an article was checked word for word against it, and anything it could not find was dropped. · Corrections and changes

If HYBE had your data

Look for HYBE’s own notice or letter: it should say what of yours was involved. Keep it.
Call your bank on the number printed on your card (never one from a message), check recent payments and ask for a new card.
An ID number cannot be changed, so lock it: a credit freeze or fraud alert in the US, a credit warning (kreditadvarsel) on borger.dk in Denmark, Cifas protective registration in the UK.
Your email address is out: expect convincing phishing. Open HYBE by typing its address yourself, never through a link in an email or text, and check the sender before you reply.
Your phone number is out: ask your mobile operator for a PIN or port-out lock, so nobody can move your number to another SIM card and take your login codes.
Your home address is out: be wary of letters, parcels or visitors that mention HYBE, and of texts asking for a “delivery fee”.
Expect scams that use your details: calls, texts or emails pretending to be HYBE, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

Use HYBE? Hear first next time

Breach Radar tells you when a company you use is breached, and what to do. Free, and your list stays on your phone.

Download on the App Store

Questions about the HYBE breach

Was HYBE hacked?

Saostar, cineplay and Star News Korea reported a data breach at HYBE (South Korea) on 2 November 2026, and it has been confirmed. How it happened, by the sources: hacking, through document preview solution of an external provider.

What data was exposed in the HYBE breach?

Passport numbers, Government ID numbers, Financial account and card details, Email addresses, Phone numbers, Dates of birth, Names, Addresses, Resident registration numbers and Foreign registration numbers, by the notices and reports on this page.

How do I know if I was affected?

Organisations normally tell the people whose data was involved, by letter or email, and that notice says what of yours was in it. We cannot look up individual people. If you got a notice, check that it is real, then follow the steps on this page.

Is there a HYBE data breach settlement?

No settlement open for claims is on record for HYBE as of 15 November 2026. Every open settlement is listed with its deadline.

Is a letter, email or text about the HYBE breach real or a scam?

A real notice names the breach, says what data was involved and never asks for a password, a code or a payment. Criminals often send fake notices after a breach is in the news. Do not use links or phone numbers in the message: go to HYBE’s own site, or check the letter here.

More breaches in South Korea

Every breach in South Korea →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Official registers · Corrections and changes · Accuracy audit · For journalists · Found a mistake? Tell us and we correct it.