티스토리 뷰

 

This could happen to you too

Have you ever randomly gotten a text saying "Welcome to our membership" from some app you don't know? You probably just thought it was spam and moved on, but here's the thing — someone might have secretly signed up for it using your information. Seriously. This isn't just some drama storyline.

This actually happened not too long ago. Criminals used illegally obtained personal information to sign up over 800 people to a specific service without their knowledge. The victims had no idea they were even registered. Honestly, isn't it terrifying that all they need is a name, phone number, and ID number to do this?

WARNING Got a text or email from a service you never signed up for? Don't just ignore it. It could be a sign that your information is already in someone else's hands.

It's creepy when you find out how criminals actually use it

A lot of people probably think "oh, someone will just sell it somewhere" when they hear about personal info leaks. But in reality, it's used much more specifically and maliciously than that. Just look at this recent incident.

If you break down what these criminals do, it basically comes down to this: They create accounts in your name, use those accounts to rack up benefits, or use them for even worse crimes. We're talking about things like point accumulation, opening accounts for illegal transactions, and applying for loans. You know those notifications saying "someone checked your credit" when you never did anything? That's exactly what happens.

Type of Leaked Info Main Ways It's Misused Damage Risk Level
Name + Phone Number Spam texts, picking targets for voice phishing Medium
Name + Date of Birth + Phone Number Unauthorized sign-ups for various services High
Name + ID Number + Address Loans under false identity, opening phone lines Very High
Username + Password Trying to log in to other services (credential stuffing) High

There's this thing called "credential stuffing" that sounds complicated, but basically it means taking a username and password that leaked from one place and trying it on other websites. So if your password leaks from some online store, criminals will try it on your bank app too. That's why using the same password everywhere is genuinely dangerous.

TIP Don't think "I'm nobody important, why would they target me?" Criminals don't go after specific people — they collect info in bulk and automate the process. If your number is on the list, you're fair game.

3 things you need to check right now

Okay, here's the most important part. If you suspect your info got leaked, or you just want to check "just in case," here are things you can do right now. It's not complicated, I promise.

1
Check if anyone opened a phone line or took out a loan in your name. There's something called an 'identity theft prevention service.' You can use the government-operated PASS app or your mobile carrier's app to find the "Identity Theft Prevention" menu and see instantly how many phone lines were activated under your name. Also, on the Korea Credit Information Foundation's 'Credit4U' website, you can check for free if anyone applied for loans or credit in your name. If you've never done this before, do it right now.
2
Find service accounts you never signed up for. If you log into the 'Government24' website (run by the Ministry of Public Administration and Security), you can see a list of websites registered with your ID number. It's called 'Viewing Your Identity Verification Usage History.' If you see a website name you've never heard of? Go straight to that site and request account deletion or report it. Honestly, so many people don't even know this feature exists.
3
Change your passwords right now + turn on 2-step verification. I know it's annoying. But it's honestly the fastest way to protect yourself. At least for your email, bank app, and Kakao/Naver accounts, use different passwords from everywhere else. And 'two-step authentication' is when you need to confirm your identity with a text or app after entering your password — if this is on, even if someone gets your password, they can't just log in. Search for '2-step authentication' or '2nd verification' in settings and turn it on.
TIP If managing passwords feels overwhelming, try a password manager app (like Google Password Manager or Naver ID Manager). The app remembers your complicated passwords so you don't have to.

Even if you can't prevent leaks, you can reduce the damage

Let me be real with you. It's nearly impossible to completely prevent personal info leaks no matter how careful you are. If a company you signed up with gets hacked, there's nothing you can do about it. But here's the thing — you CAN reduce the damage after your info gets out.

Beyond the three check methods I mentioned earlier, there's one more good habit to get into. If you call the Personal Information Infringement Reporting Center (dial 118 without the area code), you can report and get help if your information is being used illegally. Even if reporting sounds like a hassle, one phone call can prevent way bigger problems down the road.

WARNING Don't put off reporting if you suspect something's wrong. Identity theft damage tends to snowball over time. If something feels off, report it the same day and lock your accounts right away.

The reason this incident feels so close to home is that all 800 victims had no idea they'd been targeted. The scary part is that accounts could be getting created in your name right now without you knowing it. After reading this, just spend 10 minutes and check those three things I mentioned. It might seem like nothing, but it's honestly the most practical way to protect yourself. 😊

Frequently Asked Questions

Q. I found a suspicious website in my registration history on Government24. What should I do?

A. First, go to the website directly and request 'account deletion' or 'personal information removal.' If the website seems sketchy or won't let you delete your account, you can report it to the Personal Information Infringement Reporting Center (dial 118 without the area code) and get help. You can also report it through the Police Agency's Cyber Crime Reporting System (ecrm.police.go.kr).

Q. Is there a way to check all at once if my personal info has been leaked?

A. There's no perfect one-stop check, but you can use the 'Finding My Leaked Information' service (kidc.eprivacy.go.kr) to see if your email or phone number is in known hacking databases. Since it's an official service run by the Korea Internet & Security Agency (KISA), you can use it with peace of mind.

#PersonalInfoLeaks #IdentityTheft #DataPrivacy #SecurityTips #CyberCrime #InfoSecurity #PrivacyBreach #SecurityHacks