Daegu’s public delivery app, Daeguro, suffered an external intrusion on October 31, exposing settlement account numbers for about 25,000 franchise owners, including businesses that had already closed. The exposed records reportedly also included account-holder names. Around 250 current and former operator employees had their system access usernames and passwords compromised.
The incident affects more than customer privacy. Restaurant owners use settlement accounts to receive operating revenue, and one owner warned that phishing or interference with those accounts could disrupt payments for ingredients, wages and rent. No financial losses have been confirmed so far, but the disclosed information could create risks that extend beyond the app itself.
Daegu officials and the operator notified affected owners four days after the intrusion, a delay that has drawn criticism. The operator said it was strengthening security and preparing measures to prevent a recurrence. Reports suggested that data may have been taken at a speed consistent with automated or artificial-intelligence-assisted activity, but the attack method has not been established. The incident has renewed scrutiny of public delivery services that depend on limited local-government budgets and relatively small outsourced operators, where security staffing and investment may be constrained.