K-Auction warns client data may have leaked from Douzone Bizon backup server

K-Auction posted a notice on its website at 5:30 pm on October 31 titled "Notice of Possible Personal Information Leakage", warning that personal data it had stored on Douzone Bizon's backup server may have been exposed to illegal external access, according to dailysecu.com.

The company said Douzone Bizon notified it on October 28 that K-Auction's data had remained on the backup server after the service ended and that the server had suffered an external breach. Douzone Bizon suspects the attacker exploited a vulnerability in the backup solution to take encrypted data out of the system.

K-Auction had ended its use of Douzone Bizon's cloud and backup services on May 1, 2026.

The potentially leaked data includes names, resident registration numbers or foreigner registration numbers, account numbers and some payment information. Affected parties are people who worked at K-Auction before May 2026, people who received business, other or interest income payments from the company, and individuals who transacted with K-Auction.

K-Auction said the data was stored encrypted and that no sign of the encryption key being leaked has been found so far. It added that it asked Douzone Bizon to share the cause and investigation results, and that the data is now being kept separately by Douzone Bizon.