eTomato said that on November 3, 2026 it confirmed an external hacker exploited a website security flaw to access its personal data database, leaking member information [1]. The notice lists lookups on July 13-20, August 21-22 and September 6 through login pages of affiliates NewsTomato, eTomato mobile web and TomatoTV, exposing names, phone-number IDs, emails and addresses [1]. eTomato asks members to change their password and any identical passwords on other sites, and to beware of calls, texts and emails impersonating it about compensation, refunds or identity checks [1].
South Korean financial media group eTomato: login page flaw exploited, member phone numbers and addresses leaked
1 min read
- Disclosed
- Nov 6, 2026
- Occurred
- Jul 13, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Media, entertainment & gaming
Timeline
Technical details
Remediation
Vendor guidance
- 1Change passwords mitigate[1]
Change your eTomato password and any reused passwords.
References
Official / primary1
- [1]eTomato2026-11-06Accessed 2026-11-11Snapshot 2026-11-11 sha256 841aec10788e
“당사는 2026년 11월 3일, 외부 해커가 홈페이지 보안 취약점을 이용해 개인정보 저장 DB에 접근하여 개인정보가 유출된 사실을 확인하였습니다.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.