Republic of Korea: Personal Information Protection Commission investigation into Yes24's compliance with Personal Information Protection Act following personal data breach

Progress

Current status
under deliberation
11 Jun 2025 under deliberation

Scope

Implementers
Republic of Korea
Policy Area
Data governance
Policy Instrument
Cybersecurity regulation
Regulated Economic Activity
platform intermediary: e-commerce
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

11 Jun 2025
under deliberation

Personal Information Protection Commission announced investigation into Yes24 following personal data breach

On 11 June 2025, the Personal Information Protection Commission (PIPC) of the Republic of Korea announced an investigation into a personal data breach at Yes24 Co. The data breach followed a ransomware attack detected on 9 June 2025, prompting the c…

Source
Event type investigation
Action type announcement
Government branch executive
Government body data protection authority