[REVISION HISTORY]
South Korean corporate cybersecurity breaches
2 recorded revisions of this situation.
What changed
2026-10-29 00:15 UTC → 2026-10-30 07:45 UTC ·
added
removed
South Korean authorities and private entities have responded to separate security incidents involving major domestic organizations. In late October, the Ministry of Science and ICT launched a joint investigation into Douzone Bizon, a provider of enterprise resource planning and groupware software. The company reported two breaches: one involving unauthorized access to internal development servers via a VPN, potentially exposing customer personal information, and another involving the exfiltration of encrypted data from a third-party backup server solution. Concurrently, the cryptocurrency exchange Bithumb reported a breach of its internal mobile groupware system. This incident resulted in the leak of personal information belonging to employees, subsidiaries, and partner companies. system, Daou Office. While Bithumb previously stated that core transaction infrastructure remained unaffected, financial authorities including the Financial Services Commission and new details confirmed that the Financial Supervisory Service held emergency meetings unauthorized access, which occurred on October 27, lasted approximately one hour. The breach affected 715 employees or external contractors and initiated on-site inspections 6,444 customer records. Although 5,600 customer records remained encrypted, personal information for 844 customers was confirmed to determine the scope of the breach have been leaked. This exposed data may include names, mobile numbers, email addresses, resident registration numbers, bank account details, and oversee potential consumer protections. Following the breach, the Financial Services Commission (FSC) launched on-site inspections at Bithumb. The exchange clarified copies of identification documents. Bithumb maintains that the compromised mobile groupware system, used for administrative tasks and employee communication, system is “physically physically and logically separated” operationally separate from its core trading platform and customer asset management systems. While Bithumb confirmed the exposure of employee and partner data, the company is still investigating potential customer data compromise. Currently, there is no evidence systems, noting that no customer funds or wallet addresses or information usable for fraudulent transfers were leaked. accessed. Regulators, including the Financial Services Commission and the Personal Information Protection Commission, have launched on-site inspections to investigate the cause and assess the extent of the exposure. Bithumb has pledged to compensate affected customers.
Versions
- 2026-10-30 07:45 UTC South Korean corporate cybersecurity breaches
- 2026-10-29 00:15 UTC South Korean corporate cybersecurity breaches
- 2026-10-28 12:04 UTC South Korean corporate cybersecurity breaches
Select a version to see what changed compared to the one before it.