AgileSoDA staff data potentially exposed in external backup server breach
SpilloverSpillover from the DOUZONE BIZON incident · View original incident →AgileSoDA was identified as a further victim of the Douzone Bizon server breach. It is investigating the possible exposure of employees' and executives' unique identification data, financial information, and personnel, payroll and tax records held by an external backup service, while checking whether any data was actually exfiltrated. Information belonging to clients, including NH NongHyup Bank, was found not to have been leaked.
Key facts
- Affected organisation
- AgileSoDA
- Original incident
- DOUZONE BIZON server breach raises wider concerns over client data exposure
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Possible exposure of employees' and executives' unique identification data, financial information, and personnel, payroll and tax records
- Cause / method
- Breach of Douzone Bizon's external backup server
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- AgileSoDA announced that staff records may have been leaked following the Douzone Bizon breach and that an investigation was under way.
Original incident
This is spillover from the DOUZONE BIZON incident.
DOUZONE BIZON server breach raises wider concerns over client data exposure
Impact: As of 5 November, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of 5 November, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totalling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the extent of any leak remain under investigation.
Related reports: 27 · last report →
3 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.