HYBE breach exposes employee medical and financial records

HYBE, the entertainment group behind BTS, has disclosed a cyberattack that exposed personal information belonging to current and former employees and business partners. In an apology posted on its site, HYBE said an internal security review found unauthorized access via an outside vendor’s document preview software linked to its electronic approval system, with a further finding of similar access to its expense management system. The breaches were reported to have occurred on 12–13 September and 3–5 October.

The compromised data, according to HYBE, includes resident registration numbers, credit card numbers, medical records, passport numbers, bank account details, addresses and phone numbers. HYBE did not specify how many individuals were affected. The company attributed the intrusion to activity connected to an external vendor’s software component used within its internal systems.

The initial notification was reported in Korea Times and described as an internal and partner-facing incident affecting employees and business associates.

HYBE’s statement emphasised that the breach impacted both current and former personnel and business partners, with sensitive information exposed through multiple access points tied to the vendor-enabled document preview and the expense management platform. The company did not disclose broader security lessons, remediation steps, or a total affected count in its apology. The disclosure serves as a reminder of risk from third-party software connected to internal workflows.