Valeks Service warns partner data may have leaked in Douzone Bizon backup breach

Valeks Service notified its business partner contacts on November 2, 2026 that their personal information may have been leaked following the breach of Douzone Bizon's APO backup service.

The company said no actual leak of personal information has been confirmed so far. It listed the potentially affected items as names, phone numbers, email addresses, business registration numbers, resident registration numbers and bank account numbers of business partner contacts.

Valeks Service said it has demanded that Douzone Bizon confirm whether its backup data was exfiltrated and what the scope of the damage is. Douzone Bizon told Valeks Service that the entire backup data, including unique identification information and financial information, was encrypted, with no indication that the encryption key had been leaked.

According to dailysecu.com, Douzone Bizon found anomalous signs during a service check and confirmed a security vulnerability in its backup software after consulting supplier Ahsay. Some encrypted data stored on the backup server was found to have been exfiltrated through that vulnerability. It has not been confirmed whether Valeks Service's data was among the exfiltrated data.

Douzone Bizon said it blocked the affected server, restricted access from overseas IP addresses and reported the incident to KISA and the Personal Information Protection Commission.

Valeks Service advised users to be wary of requests for money or personal information made in the company's name or in the names of financial institutions, and not to open links or attachments from unknown messages and emails.