🔴 LOOKPIN (KR) 2.7M CUSTOMERS / 11M ORDERS EXFILTRATED

A threat actor sells customer and order data from LOOKPIN, a South Korean online men's fashion marketplace and app.

The underground listing alleges:

* 2.7M+ customer records
* 11M+ order records
* Breach via SQLi authentication bypass (claimed September 2026)
* Fields such as emails, phone numbers, password hashes/tokens, and account metadata (per seller analytics showing ~2.70M filled rows)