Douzone Bizon backup server breach may have exposed Withyou employee data
Withyou says no actual leak has been confirmed and that the stored backup data was encrypted, with no sign the decryption key leaked.
Withyou, an affiliate of a major Korean telecom carrier, told employees that their personal data may have leaked after an outsider possibly gained illegal access to a backup server operated by Douzone Bizon, according to dailysecu.com. Douzone Bizon notified Withyou of the possible intrusion on October 28 at around 10:50 a.m.
The data that may have been exposed includes Withyou employees' names, phone numbers and bank account information stored in the backup service, Argos 2.0 EDM, which is used for employee HR data.
Withyou said no actual leak of employee data has been confirmed. It added that the stored backup data was encrypted and that there is no sign the key leaked.
Douzone Bizon shut down the backup server, blocked access from overseas IP addresses and reported the incident to the Korea Internet & Security Agency (KISA), according to the report.
Withyou advised employees to watch for phishing calls and messages and to use the Financial Supervisory Service's personal data exposure prevention system.
Quick answers
What data may have been exposed in the Douzone Bizon backup breach?
Withyou employees' names, phone numbers and bank account information. The company said no actual leak has been confirmed and the backup data was encrypted.
When was Withyou notified of the incident?
Douzone Bizon notified Withyou on October 28 at around 10:50 a.m. that an outsider may have illegally accessed its backup server.
Was the breach reported to authorities?
Yes. Douzone Bizon reported it to KISA, shut down the backup server and blocked access from overseas IP addresses.