HYBE said personal information belonging to employees, former employees and partner-company personnel was exposed during abnormal access detected in September and October 2026. The access occurred from September 12 to 13 and October 3 to 5 through an external document-preview solution linked to its electronic approval system, with similar access later found in its expense-processing system. Exposed data included names, resident registration numbers, passport numbers, bank account numbers, card numbers, mobile phone numbers, birth dates and employee numbers.
HYBE said it blocked the identified internet addresses and access routes, reported the incident to the Korea Internet and Security Agency and the Personal Information Protection Commission, and would strengthen access controls and security monitoring.