GiftiL, operated by Lotte affiliate Spoon, reported customer-data exposure following external intrusion. The company detected abnormal access on October 22 and identified four affected fields: names, mobile numbers, email addresses and bank-account numbers used for refunds. It blocked relevant IP addresses, notified authorities and sent text notices to affected users, but did not disclose the total scale. Exposure of an account number is not itself evidence that money was stolen; users should nevertheless verify refund or compensation messages through official channels rather than trust personal details in a message.