South Korea's Kakao Games apologized after external attackers exploited vulnerabilities in its Partners and RINK services, exposing personal information linked to 140 users. The company detected abnormal access at 10:44 p.m. on September 12 and confirmed the leak at 12:50 a.m. on September 14; the estimated attack window ended at 7:37 p.m. on September 13. Partners contained third-party identification codes and third-party account IDs used for external integration, while RINK contained Kakao Games' internal identification codes and country codes. Kakao Games said these identifiers are difficult to use to identify individuals and that passwords were not compromised; its earlier notice also said names and contact details were not exposed. The company blocked the access route, reported the incident to relevant authorities, patched vulnerabilities, preserved evidence and strengthened monitoring. It is investigating the cause and scope with external cybersecurity experts and warned users about phishing, smishing, vishing and other scams impersonating Kakao Games or related institutions.