Gwangju Dong-gu community app admin page lacked authentication; data of 2,101 residents downloaded

Boannews reports the Gwangju Dong-gu office said the admin page of its community-participation app "Uri Dongne do Banjang" lacked login authentication and was accessed from outside, leaking personal data of 2,101 people, confirmed on November 5 ^[1]. Leaked items include names, mobile numbers, nicknames, administrative-district names and accumulated points; the office said resident registration numbers and financial data are not kept in the system and were not leaked ^[1]. Operators of similar platforms can follow the office's fix: block external access to admin pages and enforce strict authorization and identity checks on server APIs ^[1].

Industries mainly affected: Government

1. Operators of similar platforms should block external access to admin pages ^[1].
2. Enforce strict authorization and identity checks on server APIs ^[1].