Apartner Data Breach Exposes Phone Numbers of Residents

How it happened

According to the company, the leak occurred twice on 23 October, at 10:36 a.m. and 2:41 p.m. A third party gained unauthorized access to the platform's data export function. Dukkeobi Sesang says it noticed the problem around 2 p.m. on 4 November during a security check, then notified users under Article 34 of the Personal Information Protection Act. It reported the incident to the Korea Internet & Security Agency (KISA) and to police within 24 hours of discovery.

Emergency measures included blocking the attacking IP addresses and resetting administrator accounts. The company plans to take the vulnerable web page offline until the third week of November, run a full system inspection and improve its security environment.

What users should do

The company urged users to be cautious about spam, impersonation calls and suspicious links that could exploit leaked phone numbers. It stressed that Apartner never asks for verification codes or money by phone or text message.

The case matters because Apartner is embedded in daily life for residents of about 4,300 complexes nationwide. The app combines notices, electronic voting, community facility bookings, visitor vehicle registration and automatic entrance access in one place. Even a phone-number-only leak at that scale raises the risk of targeted phishing, which is why the company's warning about unsolicited messages deserves attention.