Korean cops charge teens over bike hire breach that exposed data on 4.62M riders

Two South Korean teenagers were charged for breaching the Ttareungyi public bike service in June 2024 and exfiltrating data belonging to about 4.62 million users (~90% of registered users). Stolen fields reportedly included user IDs, phone numbers, home addresses, email addresses, dates of birth, genders, and weights. Police linked the intrusion to a separate DDoS probe, charged the minors under the Information and Communications Network Act, and stated there is no evidence the compromised data has been leaked or sold.