Duty Negligence
According to users of social commerce retailer WeMakePrice on June 15, WeMakePrice disclosed personal information of 35,000 members on its website for 5 hours and 30 minutes from 1pm on June 14.
The company accidentally released members’ information about refund amounts, banks and bank accounts and as well as their names on the website.
When personal information is leaked, a company should report a case to related agencies and notify victims within 24 hours. However, WeMakePrice belatedly took measures a day after the incident.
An official from WeMakePrice said, “There was an error updating the website. We corrected the error right after we received complaints from our members.” WeMakePrice also had its points worth 11 million won (US$9,709) owned by 300 members stolen in 2014 due to ID theft.