Incident Overview

A threat actor operating under the handle "p0ppin" claims that Korean insurance company Sagolink (sagolink.ai) was breached in January 2026. According to the post, the breach compromised over 12,000 customer and adjuster records. The threat actor states the compromised data includes phone numbers, genders, email addresses, birth dates, and accident reports. Sample data has been provided demonstrating the structure and types of information allegedly contained in the database.