According to The Korea Times, Seoul Facilities Corporation, which runs the Ttareungyi bike service, said on January 30 it was told by police that data of about 4.5 million users was suspected leaked, and reported it to the PIPC and KISA [1]. After confirming items per person with police and the PIPC, it began texting about 4.62 million people from July 21; according to Kyunghyang, items may include IDs, phone numbers, birth dates, gender, weight, email, addresses and minors' guardian details, with the leak dating to June 2024 [2][3]. Members should check the individual text or website notice for their leaked items and harm-prevention guidance; those who changed numbers after June 2024 or declined texts may not receive it [3].
Seoul public bike service Ttareungyi leaks data of about 4.62 million members, including minors' guardian details
1 min read
- Disclosed
- Jan 30, 2026
- Occurred
- Jun 1, 2024
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- Scale
- 4,620,000 people[2]
- CVSS basis
- Our assessment
- Technology
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government, Transportation & logistics
What to do nowOur advice
- Check the SFC's individual text or website notice for your leaked items and harm-prevention guidance [3].
Timeline
Technical details
Remediation
Vendor guidance
- 1Check your notice verify[3]
Check SFC's text or website notice for your leaked items.
References
Official / primary1
- [2]서울시설공단2026-07-20Accessed 2026-11-11Snapshot 2026-11-11 sha256 f54cd8faf037
“서울시설공단(이사장 한국영, www.sisul.or.kr)이 따릉이 회원정보 유출 사고와 관련해 경찰청·개인정보보호위원회와의 협의를 거쳐 개인별 유출 항목을 확정하고, 오는 21일부터 유출 대상 시민 약 462만 명에게 개별 문자(MMS) 및 홈페이지 안내를 시작한다고 밝혔다.”
Media2
- [1]
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.