South Korea's NHN Commerce Godomall: exposed diagnostic endpoint leaks shop customer data

S-Food Mall, which runs on NHN Commerce's Godomall platform, said Godomall's diagnostic management function was accessed without authorization, possibly exposing some customers' personal data ^[1]. The function was exposed externally without authentication and an outsider used it on the night of July 9, 2026 to read system memory; S-Food Mall's exposure was 10 names and 3 order records, with no financial or authentication data ^[1]. The notice warns not to click links in texts about delivery checks, address errors or extra shipping fees, noting the mall and couriers never ask for passwords, codes, account or card numbers by text or phone ^[1].

Industries mainly affected: Retail

1. Do not click links in texts about delivery checks, address errors or extra shipping fees ^[1].
2. Check deliveries only via the shop's official site or the courier's official channels ^[1].