Osegi
Security·2 min read

Daeguro Delivery App Hacked: 25,000 Account Numbers Exposed

Daegu's public delivery app Daeguro was breached, leaking login credentials of about 250 merchants and exposing roughly 25,000 bank account numbers. No financial loss is confirmed.

Smartphone showing a food delivery app with a red security warning icon over a server rack background.
Image: zdnet.co.kr
SUMODialoediviewergiftdetect

The server of Daeguro, the public delivery app run by the South Korean city of Daegu, has been hacked. Login IDs and passwords for about 250 merchants were leaked, and roughly 25,000 bank account numbers, including some registered to owners who have since closed their businesses, were exposed. Operator Insung Data says no financial damage has been confirmed so far.

Daegu city and Insung Data disclosed on November 5 that the security incident occurred on October 31. The city is advising affected merchants to change their passwords.

Response timeline

Insung Data noticed signs of the incident on November 1, ran an emergency system check and reported the damage to the Daegu Metropolitan Police Agency. On November 2 it reported the breach to the Korea Internet & Security Agency (KISA) and temporarily restricted the withdrawal system, which resumed after inspection. Merchants were notified of the breach on November 4.

A company official said the cause is still under investigation and that the attacker is presumed to have used artificial intelligence to extract data within moments. The company believes the path in the system that handles merchant sign-ups was breached, so it has suspended new merchant registrations. It also reset employee IDs and passwords and diversified internal access routes.

What users should know

A Daegu official said the city has asked the operator to respond thoroughly to prevent secondary damage. Daeguro stated that it never asks for settlement account changes by phone or text, nor for passwords or verification codes, and urged anyone receiving such contact to report it to customer service. Police are analyzing the server to determine the intrusion path and method.

Daeguro launched in August 2021 to support the local economy and ease delivery fees for small businesses. It has since expanded from food delivery to taxi hailing and traditional market shopping, and reportedly counts about 25,000 cumulative merchants and 740,000 registered members.

Apps worth a look

SUMO: the number puzzle

Tap the right tiles, add them up, hit the target. Easy to learn, hard to master. Free, for all ages.

Tags:daegudaegurodata breachdelivery appkisasouth korea

More from this day

See all →

More in: Security

See all →