According to Boannews, Korea Federation of SMEs (KBIZ) posted an apology on the Yellow Umbrella mutual-aid website on Nov 14, saying it found abnormal external access to the site on Nov 11 and signs that some members' personal data was viewed by a third party [1]. Possibly exposed data includes names, the first 7 digits of resident registration numbers, mobile numbers, home addresses and phone numbers, emails and SMS/email consent status; KBIZ said the rest of the ID numbers are encrypted irreversibly, and it blocked the attacking IPs and reported to KISA [1][2]. What to do now: KBIZ warns members not to respond to calls or texts impersonating KBIZ or Yellow Umbrella staff asking for money or loans, or asking them to enter or change IDs and passwords [2].
This event has not been officially confirmed. Content is based on media or third-party reports.
MediumActiveMedia reported
Korea's Yellow Umbrella small-business retirement fund site hit by abnormal access, member ID prefixes and contact data may be exposed
1 min read
- Disclosed
- Nov 14, 2026
- Occurred
- Nov 11, 2026
- Published
- Nov 14, 2026
- Last updated
- Nov 14, 2026
- CVSS basis
- Our assessment
- Attack vector
- Unknown
- Impact
- Data exposure
- Data type
- Contact infoNational ID / passport
- Actor type
- Unknown
- Motivation
- Unknown
On this page
30-second summary
Timeline
Technical details
References
Media2
- [1]보안뉴스 (Boannews)2026-11-14Accessed 2026-11-14Snapshot 2026-11-14 sha256 a3096d5590e0
“14일 중소기업중앙회는 11일 노란우산 홈페이지에 대한 외부의 비정상적인 접근과 함께 일부 고객 개인정보의 제3자 조회 의심 정황을 확인했다며 사과글을 홈페이지에 게시했다.”
- [2]조선비즈 (Chosun Biz)2026-11-14Accessed 2026-11-14Snapshot 2026-11-14 sha256 0bdcd1912616
“2007년 출범한 노란우산의 재적 가입자는 192만명이다.”
Expert help
Still not sure whether this affects you?
Tell us about your environment. We'll check it against this advisory, assess the risk, and give you concrete patch and monitoring steps.
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.