Home > National > Social Affairs

'Revenge-for-hire' gang leader detained, group allegedly stole data from Baemin to find targets

Published: 29 Mar. 2026, 16:41 Updated: 29 Mar. 2026, 19:22

A suspect believed to be the ringleader of a group that carried out so-called “revenge-for-hire” attacks using stolen Baemin customer data walks after attending a pretrial detention hearing at the Seoul Southern District Court in Yangcheon District, western Seoul, on March 28. [News1]

The ringleader of a group that carried out so-called revenge-for-hire attacks — including smearing excrement on victims’ front doors in exchange for money — has been detained. The group is also suspected of stealing personal information by infiltrating the food delivery platform Baedal Minjok, known as Baemin, to obtain the addresses of their targets.

The suspect, believed to be the ringleader and surnamed Chung, promoted the illegal services on Telegram, advertising, “We will carry out revenge attacks on your behalf,” and directed accomplices after receiving payment, according to the Yangcheon Police Precinct on Saturday. Police said the group carried out retaliatory attacks in January in Siheung, Gyeonggi, and Yangcheon District in western Seoul, smearing filth on apartment doors and spray-painting insults as part of clients’ personal revenge.

Accomplices were paid between 800,000 won ($531) and 1 million won per job. The Seoul Southern District Court issued a detention warrant for Chung on charges including intimidation, trespassing and property damage, citing “concerns over destruction of evidence and flight risk.”

The Gyeonggi Nambu Provincial Police Agency detained suspects linked to similar cases in Pyeongtaek, Gyeonggi, on Dec. 7, 2025, Dongtan in Hwaseong, Gyeonggi, on Feb. 22 and March 4, 2026, and Gunpo, Gyeonggi, on Feb. 24, 2026, though those who ordered the crimes were not apprehended. The detained suspects allegedly harassed victims’ families by delivering envelopes containing 100 crickets and distributing threatening leaflets. Some suspects allegedly applied glue to the victims’ door locks.

Police are investigating whether the cases are connected. “We are examining whether the ringleader [Chung] apprehended by the Yangcheon Police Precinct is connected to suspects arrested by the Gyeonggi Nambu Provincial Police Agency,” a police official said. “We are not ruling out the possibility of multiple ringleaders.” Similar reports have emerged nationwide, including in Daegu, Busan and the Jeolla region, police added.

Motorcycles of Baedal Minjok delivery drivers are parked in Seoul. [YONHAP]

Investigators are also tracking down clients who could face charges as co-principals. The group recruited customers through social media, advertising services related to financial disputes, extramarital affairs, school violence perpetrators and scam victims.

Lee Seung-gi, an attorney and adjunct professor at Sogang University, noted that identifying clients would be difficult. “Because requests were made anonymously through Telegram, tracing those who commissioned the crimes is expected to be challenging,” Lee said.

To obtain personal data, the group placed one of its members in a customer service role at an outsourced firm that handles Baemin operations. The member, surnamed Yeo, told police, “I handed over customer information, including addresses, whenever the organization requested it.”

Police suspect the member accessed not only assigned cases but also past consultation records handled by other agents to identify targets.

A Baemin source said the activity deviated from normal usage patterns.

“Customer service cases are typically resolved within a day, but the individual is believed to have accessed records that were more than three days old,” the source said. “We have compiled such cases and submitted them to the police as part of our cooperation.”

Baemin’s internal investigation revealed that about 1,000 customer records were accessed, of which 555 cases were identified as suspicious unauthorized access. Police believe at least 30 of those cases led to actual crimes.

The case has raised questions about oversight and data access controls at outsourced service providers.

A sticker on a restaurant in Seoul on Jan. 22, 2025, indicates its availability on food deliver platform Baedal Minjok, commonly known as Baemin. [NEWS1]

An industry source, speaking on condition of anonymity, said systemic vulnerabilities were exposed.

“Being able to access records beyond one’s assigned cases is a serious issue,” the source said. “Measures such as expanding anonymized contact systems for customer service agents should be introduced to prevent misuse of personal information.”

Woowa Brothers, the operator of Baemin, said it is terminating its contract with the subcontractor and conducting a full review of hiring processes and workforce management.

“We are reviewing all aspects of outsourced workforce management and preparing measures to prevent a recurrence,” the company said.

According to a tip-off, several Telegram channels used to request revenge-for-hire services remain active, with four to five such groups still in operation.

Clients reportedly pay between 700,000 won and 1 million won to brokers, who recruit perpetrators through messaging platforms to carry out attacks.

Police are continuing to investigate whether similar data breaches have occurred at other platforms.

This article was originally written in Korean and translated by a bilingual reporter with the help of generative AI tools. It was then edited by a native English-speaking editor. All AI-assisted translations are reviewed and refined by our newsroom.
BY KIM JEONG-JAE, HAN CHAN-WOO [[email protected]]