According to Yonhap News TV, Day One Company, operator of Fastcampus and other online education brands, said a GitHub master account key was stolen and used for a first intrusion into its services on May 9, 2026 [1]. Eight brands including Fastcampus, Coloso and Zerobase are affected, with names, emails, phone numbers and encrypted passwords leaked, plus addresses and job details for some customers [1]. The company says no publication or misuse has been seen yet but members should change their account passwords for safety [1].
South Korea's Day One Company: stolen GitHub key leads to member data leak across Fastcampus and 7 other brands
1 min read
- Disclosed
- Jun 11, 2026
- Occurred
- May 9, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
Technical details
Remediation
Vendor guidance
- 1Change password mitigate[1]
Change your account password.
References
Media1
- [1]Yonhap News TV2026-06-11Accessed 2026-11-11Snapshot 2026-11-11 sha256 7740ff49739d
“온라인 실무 교육 브랜드 '패스트캠퍼스' 등을 운영하는 데이원컴퍼니에서 개인정보 유출 사고가 발생했습니다.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.