According to DailySecu, the operator of South Korean delivery platform Fly confirmed a personal data leak and apologised, putting suspected leaked records at about 330,000 versus an unverified hacker claim of 47.9 million [1]. Unauthorized access is estimated to have occurred around August 14, 2026; managers' and riders' data include names, contacts, addresses, bank accounts and resident numbers, and merchants' data include names, birth dates, business names and registration numbers [1]. The company urges users to guard against voice phishing, smishing and impersonation, especially managers and riders whose account data leaked, who should beware of contacts posing as banks asking for financial data or codes [1].
South Korean delivery platform Fly breached; about 330,000 records incl. riders' resident numbers and accounts
1 min read
- Disclosed
- Aug 19, 2026
- Occurred
- Aug 14, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 330,000 records[1]
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Retail, Transportation & logistics
What to do nowOur advice
- Guard against voice phishing, smishing and impersonation using the leaked data [1].
- Managers and riders: beware of contacts posing as banks asking for financial data or codes .
Timeline
Technical details
Remediation
Vendor guidance
- 1Beware of fake financial contacts verify[1]
Never give financial data or codes to callers posing as banks.
References
Media1
- [1]DailySecu2026-08-23Accessed 2026-11-11Snapshot 2026-11-11 sha256 c70a97240117
“국내 배달 플랫폼 플라이(FLY)를 운영하는 주식회사 플라이가 개인정보 유출 사실을 공식 확인하고 사과문을 발표했다.”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.