[Edaily Reporter Ryu junha ] SM Entertainment (SM) announced on the 8th that personal information, including employee resident registration numbers and bank account numbers, had been leaked.

In a notice posted on its website that day, SM explained, “During a recent internal security monitoring process, we confirmed that an external attacker gained unauthorized access to our business systems (such as the electronic approval system) and leaked some stored document files to the outside.”

According to SM, the personal information leak occurred around the 4th of this month. The leaked information includes △mobile phone numbers △addresses △bank account numbers △resident registration numbers △affiliation △and information listed in contracts, among other items.

Similar personal information leaks also occurred at DearU, an IT subsidiary that operates the fan communication app Bubble, and Dream Maker Entertainment, a concert planning subsidiary. An SM official stated, “As soon as we became aware of the incident, we completely blocked the IP address and access path used in the attack and replaced the unauthorized access keys to prevent further attacks and information leaks.”

The spokesperson also emphasized, “We plan to implement additional measures necessary to prevent further damage, including a thorough investigation and security system review in cooperation with government authorities and external expert agencies.”

They also noted that, to date, no cases of secondary damage resulting from the misuse of the leaked personal information have been confirmed. SM stated, “We take this incident very seriously and will do our utmost to prevent similar incidents from recurring by further strengthening access controls and security monitoring within our internal systems, thoroughly identifying the cause, and improving our security framework.”

Meanwhile, the exact circumstances of the incident are currently under investigation by the authorities. SM added, “We are conducting a thorough investigation into the exact circumstances of the incident in cooperation with the relevant authorities,” and stated, “We sincerely apologize for any concern this incident may have caused.”