ST Unitas, operator of the Gongdangi exam-prep brands, announced on June 8, 2026 that some members' personal data leaked through unauthorized access to its operating system [1]. Email-registered members' email, encrypted password, name, birth date, gender, phone and address leaked (social-login members without passwords); the company replaced the related access keys and tightened cloud access control [1]. The company asks members to change their login password, beware of texts and calls of unknown origin and not respond to requests for codes or financial data [1].
South Korean exam-prep provider ST Unitas: unauthorized system access leaks member data
1 min read
- Disclosed
- Jun 8, 2026
- Published
- Nov 11, 2026
- Last updated
- Nov 11, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Data type
- Actor type
- Motivation
On this page
30-second summary
Timeline
- ST Unitas notice[1]
Technical details
Remediation
Vendor guidance
- 1Change password mitigate[1]
Change your ST Unitas login password.
References
Official / primary1
- [1]ST Unitas (Gongdangi)2026-06-08Accessed 2026-11-11Snapshot 2026-11-11 sha256 e8c8d0487409
“최근 비인가된 접근으로 운영시스템을 통해 일부 개인정보가 유출된 사실을 확인하였으며,”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.