Gabia Suffers Data Breach Exposing Nearly 3,000 Customers’ Personal Information On September 21, South Korean cloud and IT infrastructure provider Gabia confirmed a data breach affecting 2,998 customers, including individuals and corporate clients. The incident occurred at approximately 11:45 a.m. local time, when an external attacker exploited a vulnerability in the company’s web services specifically, insufficient validation of external requests to gain access to internal systems. The exposed data included customer names, IDs, email addresses, and mobile phone numbers, though passwords were not compromised. Gabia detected the breach shortly after and immediately blocked the attack vector, disabled related accounts, and reported the incident to South Korea’s Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission. The exact timing of the reports was not disclosed. In response, Gabia preserved forensic evidence, strengthened access controls, patched the exploited vulnerability, and conducted a full review for similar security gaps. The company also enhanced anomaly detection and monitoring to prevent further incidents. While no additional data leaks have been confirmed, Gabia is collaborating with authorities to determine the full scope of the breach and will provide updates as new details emerge. Gabia, a Ministry of Science and ICT-designated security monitoring firm, offers services including security consulting, incident response, and vulnerability assessments. Its subsidiary, X-Gate, specializes in security solutions and monitoring. The breach underscores the risks faced by even security-focused providers in safeguarding customer data.