SM 娱乐

As of now, no cases of leaked information being used for secondary harm have been confirmed.

截至目前，未确认有泄露信息被用于二次侵害的案例。

After discovery, SM immediately blocked the attacker's IP and access path, replaced the compromised access keys, and reported to the Korea Internet & Security Agency and the Personal Information Protection Commission.

发现后已立即封锁攻击所用的 IP 与访问路径、更换被盗用的访问密钥，并已向韩国互联网振兴院与个人信息保护委员会通报。

Subsidiaries DearU and Dream Maker Entertainment experienced similar leaks, but fan information was not affected.

子公司 DearU 与演唱会企划子公司 Dream Maker 娱乐也发生同类泄露；DearU 运营粉丝通讯应用 Bubble，SM 称粉丝信息未受影响。

SM is still confirming the exact scope of the leak and has not disclosed the number of affected people.

SM 称正在确认准确的泄露范围，尚未公布受影响人数。

The leaked data includes employees' and partners' phone numbers, addresses, bank account numbers, resident registration numbers (ID card numbers), departments, and some contract information.

泄露内容包括员工与合作方的手机号、住址、银行账号、居民登记号（身份证号）、所属部门，以及合同中记载的部分信息。

The leak occurred around November 4.

泄露发生在 11 月 4 日前后。

SM 娱乐 confirmed that external attackers gained unauthorized access to its business systems, including the electronic approval system, and exfiltrated some archived files.

公司在内部安全监控中确认，外部攻击者未授权访问了其业务系统，包括电子审批系统，并将部分存档文件传出公司。