Douzone Bizon APO backup service breached; leak notice posted
Jeonbuk Institute of Content Convergence published Douzone Bizon's advisory on a possible personal data leak tied to the APO backup service.
South Korea's Jeonbuk Institute of Content Convergence posted a notice on its official website on November 6 titled "Notice on Possible Personal Data Leak and Breach Incident," warning of a possible personal data leak following a breach involving Douzone Bizon's APO backup service, according to dailysecu.com.
The notice carried Douzone Bizon's advisory to data subjects, issued under Article 34 of the Personal Information Protection Act. The company said it detected signs of unlawful unauthorized external access during a check of its backup solution service.
Douzone Bizon said some encrypted data stored on the backup server is suspected of having been exfiltrated through external intrusion attempts. It added that all data on the backup server was stored in a strongly encrypted state and that no signs were found of the encryption key having leaked.
The company said it forcibly shut down the affected server, blocked overseas IP access and reported the matter to the Korea Internet & Security Agency (KISA). It said it will issue further notice once an investigation by the relevant authorities determines whether data was actually leaked and the scope of affected parties.
Quick answers
What happened to Douzone Bizon's APO backup service?
Douzone Bizon said it detected signs of unauthorized external access and suspects some encrypted data on the backup server was exfiltrated through intrusion attempts.
Was the encryption key leaked?
The company said all data on the backup server was strongly encrypted and that no signs were found of the key having leaked.
What has Douzone Bizon done so far?
It forcibly shut down the affected server, blocked overseas IP access and reported the matter to KISA, and said it will issue further notice once authorities determine whether data was leaked and who is affected.