Gangnam Unni

Gangnam Unni's breach ran through an API built to retrieve consultation records, hit once on September 4 and again by another route the next day. The filing does not say how the access was authorized or whose credentials made it work; it names the door, not the key. What came out was 219,665 people's names, contact details, procedure histories, hospital and doctor names, appointment times, uploaded photographs, and some payment details. An API meant to serve consultation records to the platform served them up just as efficiently to someone who found the path twice. In bulk.