Breach Disclosure: GGumim.co.kr

The Korean interior decorating site, GGumim.co.kr, reportedly suffered a data breach in March 2020, which impacted almost 2.3 million members. According to Bleeping Computer, GGumim.co.kr is one of 18 companies whose data was released by a hacker known as "ShinyHunters". Subsequently, the stolen data was shared extensively throughout online hacking communities.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account.

Details

This breach data became available on July 27, 2020 and was part of the massive upload by ShinyHunters to various hacking forums. This data impacted around 2.3 million members and included names, passwords, phone numbers, 3rd party tokens (Facebook, Google), and various preferences for the site.

Figure 1: Forum posting on RaidForums for the GGumim.co.kr breach