INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Nol Universe Experiences Data Breach Leaking User and Employee Info

| 2026-10-26 05:27 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
A data breach has occurred at Nol Universe, a popular Korean travel and leisure platform, resulting in the release of user and employee personal information. The incident targeted customers who used Interpark Tour's domestic hotel reservation service from 15th February last year to 8th last month, with leaked records including customer ID, name, phone number, email address, product name, purchase amount, and date of use. An external attacker exploited a security vulnerability in Nol Universe's system on 22nd February, which was later confirmed by the company on 26th February. Interpark Tour's air, overseas hotel, tour, and ticket reservation services were not targeted. The Korea Internet & Security Agency (KISA) has been applied for technical support to enhance the security vulnerability and detect abnormal access.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope hospitalityhospitality
Incident Timeline
‎2025/10/26
Threat actors leaked reservation records of Interpark Tour's domestic hotel reservation service from 15th February last year to 8th October this year.
‎15th February last year to
Threat actors used Interpark Tour's domestic hotel reservation service to target customers whose personal information was leaked.
‎22nd February
An external attacker exploited a security vulnerability in Noluniverse's system on 22nd February to access and leak both user and employee personal information.
organisation Interpark Tour's
Noluniverse stated on its website on 26th February that an external attacker exploited a security vulnerability in its system to access the domestic hotel reservation function for Interpark Tour's customers on 22nd February.
‎26th February
An external attacker exploited a security vulnerability in Nol Universe's system on February 22nd to access the domestic hotel reservation function for Interpark Tour's customers.
organisation Interpark Tour's
Noluniverse stated on its website on 26th February that an external attacker exploited a security vulnerability in its system to access the domestic hotel reservation function for Interpark Tour's customers on 22nd February.
‎2026/09/26
Threat actors leaked reservation records of Interpark Tour's domestic hotel reservation service from 15th February last year to 8th September this year.
‎2026/10/26
Threat actors leaked user and employee personal information at Nol Universe.
organisation NOL
Interpark Tour's air, overseas hotel, tour, and ticket reservation, as well as Nol (NOL) service reservations, were not targeted in the leak.
organisation the Korea Internet & Security Agency
It has applied for technical support from the Korea Internet & Security Agency (KISA).
organisation KISA
It has applied for technical support from the Korea Internet & Security Agency (KISA).
victims 2 users
A Naver Universe spokesperson stated, "Initially, we found that 2 users' personal information had been leaked, but the investigation revealed that more user information had been leaked than that."
Tactical Metrics
Metrics
victims
2
Users
A Naver Universe spokesperson stated, "Initially, we found that 2 users' personal information had been leaked, but the investigation revealed that more user information had been leaked than that."
Intelligence Sources
Chosun Economy 2026-10-26