Daegu's public food delivery app 'Daeguro' hacked, exposing 25,000 personal records

Daeguro, a lifestyle platform operated by the city of Daegu, was hacked, exposing the personal information of current and former merchants registered on the service.

According to Daegu city and platform operator Insung Data, an external security breach occurred Saturday, leaking more than 25,000 bank account numbers belonging to merchants as well as the system login credentials — usernames and passwords — of about 250 employees of the operating company.

Insung Data immediately took emergency response measures, reported the incident to police and notified the Korea Internet & Security Agency (KISA).

Damage confirmed so far includes the system login IDs of some merchants and the names of business owners who have since closed their establishments. No financial losses to users or merchants have been confirmed as a result of the breach.

Daegu city said it is working with the operator to prevent further harm. KISA and the Korean National Police Agency's cyber investigation unit are investigating how the hack was carried out.