Personal data, medical records and body photographs were reportedly leaked from a large plastic surgery clinic in Seoul’s Gangnam district, prompting a police investigation. An unidentified extortionist allegedly sent a victim’s boyfriend an exposed upper-body image and hospital documents containing personal information, demanding 0.01 bitcoin within six days or threatening to post the material on social media. The clinic said it found signs of malware in an internal server on the 11th and first recognized the leak on the 12th, while police later received a complaint over the threat and a separate complaint alleging violations of the Personal Information Protection Act.
The clinic said the full list of exposed data and the number of affected patients remain under investigation; the same hospital was also found to have had data leaks in May and August.