Douzone Bizon reports backup server breach, customers notified
Jungbu Power Service told employees their personal information may be affected after a vulnerability in Douzone Bizon's APO backup server.
Douzone Bizon has notified customers that a vulnerability in its APO backup server allowed encrypted data to be taken outside the system, according to dailysecu.com. Jungbu Power Service posted a notice to employees on October 30 stating that their personal information may be affected by the incident.
Douzone discovered anomalies during a service check and learned of the vulnerability from its backup solution provider. An internal investigation found signs that some encrypted data on the backup server was taken outside through the flaw.
The notice states that no actual leak of customers' backup data or related personal information has been confirmed. All data stored on the backup server was encrypted, and no sign of encryption key leakage was found.
Douzone shut down the affected server, blocked overseas IP access and reported the incident to the Korea Internet & Security Agency (KISA). The company also asked customers to separately notify affected individuals of the possible leak.
Jungbu Power Service has not disclosed which personal information items or how many people could be affected.
Quick answers
What happened to Douzone Bizon's APO backup server?
A vulnerability allowed some encrypted data on the backup server to be taken outside, according to Douzone's internal investigation.
Was personal information actually leaked?
Douzone's notice states that no actual leak of customers' backup data or related personal information has been confirmed, and no encryption key leakage was found.
Who was notified about the incident?
Douzone reported to KISA and asked customers to notify affected individuals. Jungbu Power Service posted a notice to employees on October 30.