‘Revenge-for-hire’ gang leader detained, group allegedly stole data from Baemin to find targets

A suspect believed to be the ringleader of a group that carried out so-called “revenge-for-hire” attacks using stolen Baemin customer data walks after attending a pretrial detention hearing at the Seoul Southern District Court in Yangcheon District, western Seoul, on March 28, 2026. [News1] The ringleader of a group that carried out so-called revenge-for-hire attacks — including smearing excrement on victims’ front doors in exchange for money — has been detained. The group is also suspected of stealing personal information by infiltrating the food delivery platform Baedal Minjok, known as Baemin, to obtain the addresses of their targets. The suspect, believed to be the ringleader and surnamed Chung, promoted the illegal services on Telegram, advertising, “We will carry out revenge attacks on your behalf,” and directed accomplices after receiving payment, according to the Yangcheon Police Precinct on Saturday. Police said the group carried out retaliatory attacks in January in Siheung, Gyeonggi, and Yangcheon District in western Seoul, smearing filth on apartment doors and spray-painting insults as part of clients’ personal revenge. Related Article Coupang CEO Rogers thanks delivery workers after overnight shift experience Coupang weighs speed versus efficiency, applies for ‘bundled delivery’ patent Four arrested in ‘revenge-for-hire’ crimes using stolen Baemin customer data Accomplices were paid between 800,000 won ($531) and 1 million won per job. The Seoul Southern District Court issued a detention warrant for Chung on charges including intimidation, trespassing and property damage, citing “concerns over destruction of evidence and flight risk.” The Gyeonggi Nambu Provincial Police Agency detained suspects linked to similar cases in Pyeongtaek, Gyeonggi, on Dec. 7, 2025, Dongtan in Hwaseong, Gyeonggi, on Feb. 22 and March 4, 2026, and Gunpo, Gyeonggi, on Feb. 24, 2026, though those who ordered the crimes were not apprehended. The detained suspects allegedly harassed victims’ families by delivering envelopes containing 100 crickets and distributing threatening leaflets. Some suspects allegedly applied glue to the victims’ door locks. Police are investigating whether the cases are connected. “We are examining whether the ringleader [Chung] apprehended by the Yangcheon Police Precinct is connected to suspects arrested by the Gyeonggi Nambu Provincial Police Agency,” a police official said. “We are not ruling out the possibility of multiple ringleaders.” Similar reports have emerged nationwide, including in Daegu, Busan and the Jeolla region, police added. Motorcycles of Baedal Minjok delivery drivers are parked in Seoul. [YONHAP] Investigators are also tracking down clients who could face charges as co-principals. The group recruited customers through social media, advertising services related to financial disputes, extramarital affairs, school violence perpetrators and scam victims. Lee Seung-gi, an attorney and adjunct professor at Sogang University, noted that identifying clients would be difficult. “Because requests were made anonymously through Telegram, tracing those who commissioned the crimes is expected to be challenging,” Lee said. To obtain personal data, the group placed one of its members in a customer service role at an outsourced firm that handles Baemin operations. The member, surnamed Yeo, told police, “I handed over customer information, including addresses, whenever the organization requested it.” “An employee at an outsourced customer service provider accessed past consultation records in an abnormal manner,” a Baemin official explained. Police are examining the scale and circumstances of the data breach. Earlier this month, authorities conducted a search and seizure at Woowa Brothers, the platform’s operator. “About 1,000 customer records had been accessed, with 555 suspected to involve unauthorized exposure, and police believe at least 30 of those cases led to actual crimes,” the company said. A sticker of food delivery platform Baedal Minjokon is on a restaurant in Seoul on Jan. 22, 2025. [NEWS1] “Given the nature of delivery services, customer service agents inevitably have access to address information tied to orders, but whether such sensitive access was improperly granted to outsourced workers needs to be determined through investigation,” an industry official said. In a statement issued Saturday, Woowa Brothers said, “We are terminating our contract with the subcontractor and will conduct a full review of customer service work force management,” adding that measures are being prepared to prevent a recurrence. The investigation is ongoing to determine whether additional data breaches may be linked, police said. This article was originally written in Korean and translated by a bilingual reporter with the help of generative AI tools. It was then edited by a native English-speaking editor. All AI-assisted translations are reviewed and refined by our newsroom. BY KIM JEONG-JAE [lee.jiwon10@joongang.co.kr]