Chaevi EV charging platform reports data breach affecting nearly 300,000 users

A South Korean electric vehicle charging platform, Chaevi, disclosed that a hacking attack exposed the personal data of nearly 300,000 members and is urging affected users to change their passwords immediately.

In a notice posted to its website on July 26, Chaevi said it confirmed on July 23 that 298,333 member records had been exposed in the intrusion. The company said it cut off the compromised access path as soon as it detected unusual activity and subsequently filed reports with the Personal Information Protection Commission and the Korea Internet & Security Agency.

The exposed data spanned several categories. Email addresses alone accounted for the largest share, with 164,858 records containing only that information, more than half of all affected accounts. Another 131,411 records paired an email address with an encrypted password. A smaller group of 1,235 records included email addresses along with encrypted names, encrypted contact numbers, gender and date of birth, and within that group, 829 records also contained an encrypted password.

Chaevi said that resident registration numbers, passport numbers, card numbers and bank account numbers were not part of the breach because the platform does not collect or store that kind of information.

A company representative said Chaevi is working with an outside specialized agency to determine the precise cause and scope of the incident and plans to conduct a full review of its security systems to prevent a repeat occurrence.