Douzone Bizon reports APO backup server breach, data taken
The company told customers that encrypted data may have left its APO backup server and said no evidence of leaked encryption keys was found.
Douzone Bizon has notified customers that its APO backup service server was breached and that some encrypted data may have been taken out of the backup server, according to dailysecu.com.
The company said it detected anomalies during a service check and found a vulnerability in the backup solution supplied by Ahsay. It then shut down the affected server and blocked overseas IP access.
Douzone Bizon said the data on the backup server was fully encrypted and that it had found no evidence the encryption keys were leaked. It nonetheless warned customers about the possibility of a personal data leak and reported the incident to the Korea Internet & Security Agency (KISA).
The exact timing of the incident and the affected customers and data items are still under investigation. The company is also checking whether a notice it posted on October 18 is connected to this incident, and said that notice was a precautionary notification, not a confirmed personal data leak notice.
Douzone Bizon also warned customers about contacts impersonating the company or attackers who demand money or try to lure people into opening files or clicking links.
Quick answers
Which Douzone Bizon service was affected by the breach?
The company said the breach involved the server for its APO backup service.
Was any data taken in the Douzone Bizon incident?
Douzone Bizon said it found evidence that some encrypted data was taken out of the backup server, and that no evidence of leaked encryption keys was found.
Which agency did Douzone Bizon report the incident to?
The company reported it to the Korea Internet & Security Agency (KISA).