KakaoWork Platform Hacked, Personal Data of Employees and Users Exposed

KakaoWork, the business communication service run by DK Techin, a subsidiary of Kakao Group, was infiltrated by external actors on 9 November 2026. The breach resulted in the exposure of personal information belonging to current and former Kakao Enterprise employees as well as external account users.

What happened

Attackers accessed the KakaoWork system and extracted records that contain names, nicknames, department affiliations, mobile numbers, email bodies, subjects and attachment filenames. DK Techin reported the incident to the Personal Information Protection Commission and the Korea Internet & Security Agency (KISA) and immediately blocked the external access path while launching a comprehensive system audit.

Who is affected

The compromised data set spans both active and former Kakao Enterprise staff and anyone who used KakaoWork accounts externally. The exact number of individuals and the full scope of the leaked records have not been disclosed.

Why it matters

Even though no official confirmation of further misuse has been issued, the disclosed details can enable targeted phishing attacks, credential stuffing or social engineering. Recipients of suspicious messages that reference personal identifiers such as department or recent email subjects should treat them as potentially malicious.

What users can do

• Be alert for unsolicited emails or messages that reference the leaked personal details.
• Consider changing passwords on Kakao services and any other accounts that reuse similar credentials.
• Monitor financial and online accounts for unusual activity and report any suspected fraud promptly.

DK Techin and Kakao Enterprise have not released further remediation steps beyond blocking the intrusion path.

Sources

• South Korea: 개인정보 유출 (bing)

This brief was prepared with AI assistance from the sources above and reviewed by our editors.