INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Biocosmetics Exposed: Hackers Leaked Customer, Employee and Partner SSNs

| 2026-10-31 21:31 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
VT Cosmetics, a cosmetics brand, suffered a data breach incident due to hacking between October 22nd and 23rd. The attackers accessed the former employee's account to gain unauthorized access to the Enterprise Resource Planning (ERP) system, resulting in the disclosure of customer and former employee personal information, as well as individual business partner information. The leaked information included names, phone numbers, delivery addresses, postal codes, order products, options, quantities, shopping mall order numbers, invoice numbers, shipping companies, sales place names, resident registration numbers, account numbers, bank accounts, deposit accounts, addresses, phone numbers, contact information, and email addresses of approximately 1 million customers, former employees (including JYP), and individual business partners. The attackers accessed the ERP system through a stolen employee account, exposing customer information and employee and trading partner information. VT Cosmetics has taken measures to block the attacker's connection immediately after the incident, changed passwords, strengthened second authentication and access monitoring, reported the incident to relevant authorities, and warned users about phishing messages related to orders, refunds, and account changes.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance
Incident Timeline
‎between October 22nd and 23rd
Threat actors exploited vulnerabilities to target Biocosmetics between October 22nd and 23rd, resulting in the unauthorized disclosure of customer, ex-employee, and business partner personal information.
tactic Data Breach
The data breach occurred between October 22nd and 23rd, and the company acknowledged the incident on October 27th.
‎October 27th
Threat actors leaked customer, ex-employee, and business partner personal info, including SSNs and bank account numbers, between October 22nd and 23rd.
tactic Data Breach
The data breach occurred between October 22nd and 23rd, and the company acknowledged the incident on October 27th.
‎October 30
An external attacker accessed the Enterprise Resource Planning (ERP) system through a former employee's account to gain unauthorized access.
tactic Data Breach
VT Cosmetics announced on its official website on October 30 that it had posted a statement apologizing for the data breach, stating that an external attacker had accessed the former employee's account to gain unauthorized access to the Enterprise Resource Planning (ERP) system.
organisation the Enterprise Resource Planning
VT Cosmetics announced on its official website on October 30 that it had posted a statement apologizing for the data breach, stating that an external attacker had accessed the former employee's account to gain unauthorized access to the Enterprise Resource Planning (ERP) system.
organisation ERP
VT Cosmetics announced on its official website on October 30 that it had posted a statement apologizing for the data breach, stating that an external attacker had accessed the former employee's account to gain unauthorized access to the Enterprise Resource Planning (ERP) system.
‎2026/10/31
Hackers targeted VT Cosmetics, leaking customer, ex-employee, and business partner personal info, including SSNs and bank account details.
organisation VT Cosmetics
VT Cosmetics, a cosmetics brand, has suffered a data breach incident due to hacking, resulting in the disclosure of customer and former employee, as well as individual business partner, personal information.
organisation JYP
The target of the data breach was VT Cosmetics customers, former employees (including JYP), and individual business partners.
organisation Hackers Target Biocosmetics
Hackers Target Biocosmetics, Leaking Customer, Ex-Employee, and Business Partner Personal Info, Including SSNs and Bank Account Info.
organisation Ex-Employee
Hackers Target Biocosmetics, Leaking Customer, Ex-Employee, and Business Partner Personal Info, Including SSNs and Bank Account Info.
organisation Business Partner Personal Info
Hackers Target Biocosmetics, Leaking Customer, Ex-Employee, and Business Partner Personal Info, Including SSNs and Bank Account Info.
organisation Bitec
Precautions for the second phase of damage: Bitec cosmetics has taken measures to block the attacker's connection immediately after the incident and changed the passwords of all accounts.
organisation the Personal Information Protection Commission
The company strengthened 2nd authentication and access monitoring, and reported the incident to the Personal Information Protection Commission and KISA (Korea Internet & Security Agency).
organisation KISA
The company strengthened 2nd authentication and access monitoring, and reported the incident to the Personal Information Protection Commission and KISA (Korea Internet & Security Agency).
organisation Korea Internet & Security Agency
The company strengthened 2nd authentication and access monitoring, and reported the incident to the Personal Information Protection Commission and KISA (Korea Internet & Security Agency).
Intelligence Sources
Dailysecu 2026-10-31