Modetour, Some Personal Information Leaked Due to Malware on Homepage

Apology and Commitment to Prevent Recurrence

Modetour apologized for the leakage of personal information of some customers and promised to prevent recurrence.

Modetour BI

Modetour announced on the 12th that it confirmed that malicious code was inserted into the company’s website around June, resulting in the leakage of some member information and information entered during non-member reservations.

Through a notice, Modetour stated, "As soon as we recognized the leakage, we deleted the malicious code, blocked the accessed Internet Protocol (IP), and conducted a website inspection," adding, "We deeply apologize for the incident in which our valuable customers’ personal information was compromised."

Modetour discovered traces of illegal intrusion on its website in June through its own monitoring system and reported it to the Korea Internet & Security Agency (KISA). After confirming that some customers’ personal information was actually leaked, the company reported this to the Personal Information Protection Commission. The leaked information includes Korean and English names, IDs, dates of birth, mobile phone numbers, connection information (CI), and duplicate information (DI).

Modetour is individually notifying customers whose personal information has been identified as leaked so far, while investigating the exact scale of the damage. The company explained that the leaked items may vary by customer and that no secondary damage cases have been reported yet.

A Modetour official emphasized, "To prevent recurrence, we have enhanced security levels such as intrusion prevention systems and web firewalls, and will also reinforce professional personnel," adding, "We will do our best to restore customer trust and protect customer personal information."