Personal information including delivery addresses was leaked from a subcontractor of Yogiyo, one of South Korea's largest food delivery platforms.
Great Imagination, which operates Yogiyo, notified some customers on the 26th that unauthorized access had occurred on the 14th in the system of a company that had been subcontracted to handle delivery operations. The company said the incident confirmed the possibility that personal information had been exposed.
The leak occurred at Fly, a second-tier subcontractor of Barogo, the company to which Yogiyo had outsourced its delivery operations. The exposed data included delivery addresses and instructions customers had entered for riders when placing orders, according to the notice. The full scale of the leak is still being assessed.
Yogiyo advised customers who had written building entrance door codes in the rider instructions to change those codes. The company also immediately halted Fly's handling of personal information under its subcontracting arrangement with Barogo, and reported the incident to the Personal Information Protection Commission.
