English translation of the original Korean report. Images and source documents may contain Korean text.

A consumer has claimed that their Starbucks application account was stolen, resulting in 780,000 won in unauthorized payment damages. The poster stated that even after noticing the damage and changing the password, additional payments occurred, and that they reported the incident to the police and applied for damage relief with the Korea Consumer Agency.

According to a post uploaded on the online community Bobaedream on the 6th, poster Mr. A discovered that Starbucks gift certificates he had not used were utilized from his account. He explained that after changing his password, an additional 280,000 won in damage occurred, bringing the total damage to 780,000 won. He also claimed that a credit card registered as a simple payment method in the app was used without his consent.

The mobile card gift history screens disclosed by Mr. A total 10 instances. By amount, there are eight 90,000 won cards, one 50,000 won card, and one 10,000 won card, totaling 780,000 won, which is the same as the damage amount stated by Mr. A. The payment dates and times displayed on the screens range from 10:37 PM on the 31st of last month to 0:14 AM on the 1st of this month. Each screen shows the payment method as credit card simple payment, and the recipient as having registered the mobile card.

The account’s authenticated device list also included a OnePlus A5010, which Mr. A claims he never used. The disclosed screen shows the authentication time for that device as 10:28 PM on the 31st of last month. Mr. A stated that he never used this phone or registered it to his account, raising questions about how his cards and gift certificates were used on someone else’s device.

■ Unfamiliar Device Authentication History… Expressing Frustration Over Compensation Response

Mr. A stated that he was told by Starbucks that his personal information had been leaked and that someone else had completed account verification. However, this is based on Mr. A’s account of the consultation and is distinct from any official company announcement that personal information was leaked from Starbucks’ system. Mr. A stated that he has not received a clear answer regarding compensation for the damages.

Mr. A explained in a comment on the same day that he received a mobile gift certificate notification and tried to log in, but his password had already been changed, and damage occurred while he was changing the password back. He added that he also reported his card as lost. Mr. A, who reported the incident directly to the police station and applied for damage relief with the Korea Consumer Agency, asked if there were other users who had experienced similar cases of additional payments after device registration or password changes.

Starbucks states on its official website that after receiving customer inquiries, it forwards them to the relevant department and stores, conducts a cause analysis, and then follows a processing procedure that leads to recurrence prevention, improvement, and compensation provision. Its personal information processing policy also specifies that it will respond promptly and sufficiently to reports related to personal information protection. This guidance is a general civil complaint handling policy and is not a specific answer regarding compensation for the individual damage claimed by Mr. A.