South Korean government launches investigation into Douzone Bizon security breaches

The South Korean Ministry of Science and ICT has formed a joint public-private investigation team to probe a series of security breaches at Douzone Bizon, a major provider of enterprise resource planning (ERP) and groupware software. The government classified the incidents as “serious security breaches” due to the potential for widespread damage to the company’s corporate clients.

Douzone Bizon reported two separate incidents on the 16th and 21st of the month. In the first instance, an unidentified actor gained unauthorized access to internal development servers via a Virtual Private Network (VPN) account, potentially exposing personal information such as names, resident registration numbers, account numbers, and contact details of customers using the ‘Smart A10’ accounting program.

In the second incident, a security vulnerability in a backup server solution provided by a third party allowed some encrypted data to be exfiltrated. While the company confirmed the data was encrypted and no encryption keys were stolen, the investigation is ongoing to determine the relationship between the two breaches. The investigation team includes experts from the Korea Internet & Security Agency (KISA) and private cybersecurity, system, and network specialists.