Seller of 'Corona Myeongbu' Finally Caught... 7 Million Personal Data Records Circulated (Comprehensive)

After Our Report, 'Corona List' Seller Arrested
Illegally Profited 42 Million KRW by Selling 7 Million Personal Data Records
Falsified Existing DB to Deceive Buyers with "Entry List"
Seller Said, "Advertised as Corona DB to Sell Better"
Police Investigate Other Personal Data Distributors and Buyers

[Asia Economy Reporters Seung-yoon Song and Jeong-yoon Lee] A database (DB) seller who deceived buyers by selling leaked copies of entry logs containing personal information, created to prevent the spread of the novel coronavirus infection (COVID-19), has been arrested by the police for illicitly gaining tens of millions of won.

The Cyber Investigation Unit of the Chungnam Provincial Police Agency announced on the 23rd that they have arrested and are investigating a man in his 20s, identified as A, on charges of violating the Personal Information Protection Act.

Following the initial report by this outlet(Asia Economy November 20th article '[Exclusive] "Selling COVID-19 Entry Logs"... 2 Million Personal Information Records Circulated' referenced), the police have been investigating A since the 20th of last month with cooperation from the media.

A is suspected of fabricating a false COVID-19 related entry log DB and selling it via the messenger app Telegram. In September last year, he received a DB containing personal information such as names and contact numbers of unspecified individuals from unidentified sources, then arbitrarily edited it by adding body temperature data and named it 'COVID Entry Log' or similar. He then posted sales advertisements on social networking services (SNS) and sold the DB to buyers who contacted him through Telegram.

The false 'Corona list' distributed by Mr. A. This data, organized in an Excel file, included names, phone numbers, residential areas, and body temperatures.

The 'COVID Entry Log' obtained by Asia Economy contained names, phone numbers, residences of unspecified individuals, recorded body temperatures, and some meaningless numbers. Except for the body temperature entries, it resembled a so-called 'MakDB' (a database containing only simple personal information such as names and phone numbers). When 30 randomly selected individuals listed in the log were contacted by phone, most of the names and phone numbers matched.

He explained that such DBs are mainly sought by those intending to conduct telemarketing or send spam messages to unspecified large groups. While DBs with clear purposes like 'Loan DB' or 'Mom Cafe DB' are relatively expensive at over 100 won per record, the COVID Entry Log DB was cheaper at 10 to 20 won per record.

Investigations revealed that A sold over 7 million personal information records at about 10 to 20 won each, earning approximately 42 million won in illicit profits. When apprehending A, the police seized 145 million won in cash, presumed to be proceeds from sales including this DB.

It was confirmed that A frequently changed mobile phones and drove vehicles registered under other people's names to evade police tracking.

A claimed that he produced this data based on entry logs secretly obtained by hacking government agencies. He alleged that the Ministry of Health and Welfare, the Korea Disease Control and Prevention Agency, and local governments had collected and DB-processed entry logs submitted by businesses for confirming confirmed and contact cases, which he hacked. However, police investigations so far have found no evidence that he attempted to hack government agencies.

In police questioning, A stated, "I edited and sold part of the data advertising it as a COVID-19 related DB because it would sell better, but I did not actually hack any government agencies."

The police are also identifying those who provided personal information to A as well as the buyers.

A police official said, "We will strengthen investigations into those who collect and sell others' personal information through illegal means and strictly respond by applying for seizure and confiscation of criminal proceeds obtained through illegal distribution before prosecution. We will also thoroughly crack down on personal information leaks and false information dissemination that threaten public safety and hinder COVID-19 quarantine efforts."

This content was produced with the assistance of AI translation services.