TOSS

Viva Republica, which runs the money transfer platform Toss, found unauthorized payments made on its system which resulted in a breach.

A total of eight unauthorized purchases, worth 9.4 million won ($7,853) were made on June 3 at three online websites via Toss without permission of the account owners.

Personal data, such as names, phone numbers, birth dates, and PIN numbers, had been compromised in the hacking theft.

Source: http://www.theinvestor.co.kr/view.php?ud=20200609000871

TPRM report: https://scoringcyber.rankiteo.com/company/toss

"id": "tos23589123",
"linkid": "toss",
"type": "Breach",
"date": "06/2020",
"severity": "50",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'industry': 'Financial Services',
                        'name': 'Viva Republica',
                        'type': 'Company'}],
 'attack_vector': 'Unauthorized Payments',
 'data_breach': {'personally_identifiable_information': ['names',
                                                         'phone numbers',
                                                         'birth dates',
                                                         'PIN numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['personal data']},
 'date_detected': '2023-06-03',
 'description': 'Viva Republica, which runs the money transfer platform Toss, '
                'found unauthorized payments made on its system which resulted '
                'in a breach. A total of eight unauthorized purchases, worth '
                '9.4 million won ($7,853) were made on June 3 at three online '
                'websites via Toss without permission of the account owners. '
                'Personal data, such as names, phone numbers, birth dates, and '
                'PIN numbers, had been compromised in the hacking theft.',
 'impact': {'data_compromised': ['names',
                                 'phone numbers',
                                 'birth dates',
                                 'PIN numbers'],
            'financial_loss': '9.4 million won ($7,853)'},
 'motivation': 'Financial Gain',
 'title': 'Unauthorized Payments on Toss Money Transfer Platform',
 'type': 'Data Breach, Financial Theft'}