Republic of Korea: Personal Information Protection Commission's investigation into Incruit's compliance with Personal Information Protection Act
Progress
Scope
Timeline of events
Personal Information Protection Commission confirmed Incruit's implementation of corrective measures following large-scale personal data breach
On 14 May 2026, the Personal Information Protection Commission (PIPC) reported that Incruit completed implementation of corrective measures issued in response to the 2025 personal data breach affecting approximately 7.2 million records. The PIPC con…
Personal Information Protection Commission fined Incruit KRW 463 million following 2025 personal data breach affecting 7.3 million job-seekers
On 23 October 2025, the Personal Information Protection Commission (PIPC) fined Incruit KRW 463 million for a personal data breach affecting 7,275,843 members of its online recruitment platform, in violation of the safety-measure obligation under Ar…
Personal Information Protection Commission issued fine of KRW 74.2 million against Incruit over non-compliance with Personal Information Protection Act
On 12 July 2023, the Korean Personal Information Protection Commission (PIPC) issued its ruling in the investigation into Incruit Co compliance with Personal Information Protection Act. The PIPC stated that Incruit Co experienced a security attack o…