South Korean corporate cybersecurity breaches

South Korean authorities and private entities have responded to separate security incidents involving major domestic organizations.

In late October, the Ministry of Science and ICT launched a joint investigation into Douzone Bizon, a provider of enterprise resource planning and groupware software. The company reported two breaches: one involving unauthorized access to internal development servers via a VPN, potentially exposing customer personal information, and another involving the exfiltration of encrypted data from a third-party backup server solution.

Concurrently, the cryptocurrency exchange Bithumb reported a breach of its internal mobile groupware system. This incident resulted in the leak of personal information belonging to employees, subsidiaries, and partner companies. While Bithumb stated that core transaction infrastructure remained unaffected, financial authorities including the Financial Services Commission and the Financial Supervisory Service held emergency meetings and initiated on-site inspections to determine the scope of the breach and oversee potential consumer protections.

Following the breach, the Financial Services Commission (FSC) launched on-site inspections at Bithumb. The exchange clarified that the compromised mobile groupware system, used for administrative tasks and employee communication, is “physically and logically separated” from its core trading platform and customer asset management systems. While Bithumb confirmed the exposure of employee and partner data, the company is still investigating potential customer data compromise. Currently, there is no evidence that wallet addresses or information usable for fraudulent transfers were leaked.