29CM Data Breach Exposes Personal Information of 159,000 Customers South Korean fashion and lifestyle platform 29CM, operated by Musinsa, disclosed a data breach on Sunday affecting approximately 159,000 customers. The incident stemmed from unauthorized external access to an API used for retrieving order information, which occurred on Thursday. Of the impacted users, 138,841 had only their names exposed, while 21,011 faced a more severe leak, including names, email addresses, phone numbers, and delivery details. The company confirmed that payment information and account credentials (IDs/passwords) were not compromised. Upon detecting the breach, 29CM blocked the access route, reported the incident to the Korea Internet & Security Agency (KISA), and notified affected customers about the exposed data. A dedicated webpage will be available for 30 days, allowing users to verify the extent of their data exposure. While financial data remained secure, 29CM warned that the leaked information could be exploited for phishing scams, particularly via fraudulent messages, calls, or emails referencing orders, payments, or deliveries. The company advised users to change passwords if reused across platforms and to remove or update personal details in delivery instructions. In a statement, 29CM apologized for the incident and pledged to review and strengthen its security systems to prevent future breaches.