Weverse Company, a subsidiary of Hybe and South Korea’s largest fan platform with 50 million subscribers, has apologized for a data breach and announced measures to prevent future incidents.
On the 5th, Weverse Company CEO Choi Joon-won stated, “Weverse Company recently confirmed that an internal employee unlawfully leaked and intended to use others’ personal information for private purposes. We consider this a grave issue that goes beyond individual misconduct to a failure in managing staff,” according to Xportsnews.
The incident was uncovered during an online and forensic investigation into misconduct by an employee. “The employee asked a related department if a particular applicant won a fan sign event and further verified birth years through conversation,” Choi explained.
Names and birth years were shared in a private group chat with six acquaintances who are fans of the same artist. “While the staff attempted to interfere with event outcomes, no actual interference or changes occurred, and the applicant ultimately participated,” Choi added.
According to Xportsnews, Weverse Company discovered additional violations of internal regulations and laws by the employee, including breach of trust and obstruction of business. “The individual has been excluded from work immediately, referred to the HR committee, and will be prosecuted. Weverse Company will act strictly according to legal procedures and cooperate with any investigative requests,” the company stated.
The company also emphasized that “this is not just an issue of an individual. It’s a major problem that undermines the trust built over fan event operations and personal data management.” Weverse Company is reevaluating management systems and employee education to ensure improvements.
Official Statement from Weverse Company
Recently, it was confirmed that an internal employee unlawfully leaked and intended to use others’ personal data for private means. We see this as a grave issue beyond individual misconduct, indicating a failure in Weverse Company’s employee management. We sincerely apologize to all fans who relied on our services.
The company pledged to implement measures to restore trust and apply improvements to future fan events.
Regarding the content and actions taken on these issues, and further responses, we clarify as follows:
1. Actions concerning the employee involved in data breach
The case was identified during an online and forensic investigation into staff misconduct.
A staff member from a department unrelated to the fan sign event inquired whether a specific applicant had won, and subsequently verified additional details, including birth year, through conversation. Names and birth years were then shared in a private chat room with six acquaintances. While the staff attempted to interfere with event outcomes, no actual changes occurred, and the applicant ultimately participated as intended.
It was also confirmed that the staff captured and shared personal details of 30 winners, including names, birth dates, and phone numbers, in the same private group chat for personal use.
An in-depth investigation is underway to determine if there was any interference with fan events or illegal conduct by the employee. A thorough investigation by authorities has been requested.
Legal notifications to affected users, as required by relevant laws regarding the breach, have been completed.
During investigations, additional violations of internal regulations and illegal acts were discovered.
Weverse Company immediately excluded the employee from duties, referred them to the HR committee, and filed a criminal complaint. Weverse Company will proceed with due legal action and cooperate earnestly with investigative requests.
2. Measures to prevent recurrence
Weverse does not consider this merely an individual problem. It is recognized as a critical issue that damages trust in fan event management and data control.
The company will improve management practices and education to prevent recurrence.
Improvements to deficient operations will be swiftly implemented following process reviews of fan events.
The ongoing investigation will lead to a systemic overhaul if needed, aiming for swift advancements in systems and procedures.
An internal task force has been established to review the entire process, from announcement to selection and presentation.
Fan concerns will be addressed, ensuring rapid improvements to prevent recurrence. Further advancements will be shared.
User information access will be restricted, and supervisory structures for events will be reinforced.
Overall plans will ensure collaboration and focus on artist safety without hindering operations.
Weverse Company will enhance personal data protection standards education and consistently refine management systems.
A re-education process on data handling will be rolled out, focusing on security training based on real incidents for those handling data.
Security oversight will be strengthened, and tight monitoring of data compliance will be maintained.
Weverse prioritizes responsible service management to re-establish trust and ensure platform safety.
Fan feedback will be considered, with a dedicated approach to enhancements.
For additional suggestions, contact the company via email. Efforts to address any doubts through official channels will continue.
Image source: Hybe
