DOUZONE BIZON server breach raises wider concerns over client data exposure
Two security breaches were confirmed at DOUZONE BIZON, raising the possibility that personal data belonging to client companies and third parties whose data those clients held may have been leaked. Historical records of companies whose services had ended may also have been affected, and as of November 5, 28 companies and institutions had issued notices of possible data leaks. DOUZONE BIZON voluntarily reported the incidents to the Korea Internet & Security Agency (KISA) and the Personal Information Protection Commission (PIPC) and disclosed progress on security investments totaling 16 billion won. The government deemed the incidents serious and launched a joint public-private investigation, while whether data was actually leaked and the scope of any leak remain under investigation.
Key facts
- Affected organization
- DOUZONE BIZON
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- As of November 5, 28 companies and institutions had issued notices of possible personal data leaks; the actual scale of any leak remains unconfirmed
- Cause / method
- Backup server compromise
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- A joint public-private investigation team began investigating the two security breaches at DOUZONE BIZON.
- DOUZONE BIZON disclosed follow-up measures for the breaches and progress on security investments totaling 16 billion won.
- The Korean Association of Certified Public Tax Accountants began coordinating a joint response to the DOUZONE BIZON breaches and strengthening information protection for tax accountants and taxpayers.
- The number of companies and institutions that had issued notices of possible personal data leaks reached 28.
- Historical records of companies that had terminated their services and personal data of third parties entrusted to client companies were also found to be potentially affected.
- Institutions in South Jeolla and North Jeolla were also reported to have issued notices of possible personal data leaks.
Also affected by this incident
Asan Chungmu Hospital warns business partner data may have leaked in external backup server breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible leak of business partners' account details and other data
A breach of the external backup server for the accounting software from Douzone Bizon, used by Asan Chungmu Hospital, raised the possibility that business partners' account details and other data were leaked. Youngseo Medical Foundation, the medical corporation that runs the hospital, was notified by Douzone Bizon of the possible leak and posted an official notice.
Related reports: 7 · last report →DOUZONE BIZON hack raises data leak concerns at National Museum Complex
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Potential leak of personal information, including resident registration numbers and bank account numbers; scale unconfirmed
The National Museum Complex’s Integrated Operations Support Center identified a potential leak of personal information stored on servers associated with DOUZONE BIZON’s backup service. Potentially affected information included resident registration numbers and bank account numbers. The center posted a notice on its website on October 30, 2026, and launched an investigation, which is ongoing to determine whether a leak actually occurred.
Related reports: 3 · last report →Changbi warns of possible author and business partner data leak after Douzone Bizon hack
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentChangbi announced on October 30 that personal information belonging to authors and business partner personnel may have been leaked in a security breach of Douzone Bizon's backup service. The data showing signs of exfiltration was encrypted, and an investigation is underway to determine whether a leak actually occurred and who and what it affected.
Related reports: 9 · last report →Changbi Education authors' and business partners' personal data possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's backup service raised the possibility that personal information of Changbi Education authors and business partner contacts was leaked. On October 30, Changbi Education posted a notice about the possible personal information leak on its website.
Read on 데일리시큐 ↗Charmzone Automotive customers' personal data possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA server breach at accounting and backup service provider Douzone Bizon raised the possibility that Charmzone Automotive customers' personal information was leaked. An external attacker illegally accessed a Douzone Bizon backup server and took out some of the encrypted data. On October 30, Charmzone Automotive officially announced the possible leak of customer personal information.
Read on 데일리시큐 ↗Petdoc's former Hairu employees' and business partners' data possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of a Douzone Bizon backup server raised the possibility that personal information of employees and business partners of Hairu, which Petdoc previously merged with, was leaked. The potentially leaked information includes resident registration numbers and bank account numbers, and whether a leak actually occurred and its scale have not been confirmed. Petdoc posted a related notice on its website on October 30.
Read on 데일리시큐 ↗WithYou notifies of possible leak of employees' personal data
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentWithYou posted a notice on its website that personal information may have been leaked in a breach of the Douzone Bizon backup service it uses to process employee HR data. The potentially leaked items are names, phone numbers and bank account information, and whether a leak actually occurred and the number of people affected have not been confirmed.
Read on 데일리시큐 ↗Jaewon Food employees' and franchise owners' personal data possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's backup service raised the possibility that personal information of Jaewon Food employees and franchise owners was leaked. The potentially leaked information includes names, dates of birth, contact details and bank account numbers, and the exact affected parties and whether a leak actually occurred have not been confirmed. Jaewon Food posted a notice for employees and owners on its website.
Read on 데일리시큐 ↗Korea Ladies Professional Golf Association members' personal data possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's backup service raised the possibility that personal information of Korea Ladies Professional Golf Association members was leaked. The potentially leaked information includes names, resident registration numbers and addresses. The association posted a notice on its official website on October 30, and an investigation into whether a leak actually occurred and its scope is under way.
Read on 데일리시큐 ↗Chuncheon Cultural Foundation personal data possibly leaked via external backup server breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's external backup server used by the Chuncheon Cultural Foundation raised the possibility that the foundation's personal information was leaked. On October 30, 2026, the foundation posted a notice on its official website and is checking whether it was affected.
Read on 데일리시큐 ↗K Auction personal data left in backups after service termination possibly leaked
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of a Douzone Bizon backup server raised the possibility that personal information of K Auction employees and business contacts was leaked. K Auction ended its use of Douzone Bizon's cloud service in May 2026, but the related data remained on the backup server. On October 31, K Auction announced the possible leak on its website.
Read on 데일리시큐 ↗Korea Airport Security faces possible data leak linked to Douzone Bizon hack
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentThe possibility of a personal data leak at Korea Airport Security was raised in connection with the Douzone Bizon breach. On Oct. 31, Korea Airport Security announced that malware emails abusing a recruiter's name and the title of a genuine recruitment notice had actually been sent. The emails used a lookalike domain to lure recipients into downloading a file, and no link to the Douzone Bizon breach has been confirmed.
Related reports: 2 →Douzone Bizon server breach raises concerns over Sunghyun data leak
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's servers raised the possibility of a personal data leak at Sunghyun Accounting Corporation, 11 months after its contract had ended. Backup data belonging to former clients was also confirmed to have remained on the servers.
Related reports: 20 · last report →DOUZONE BIZON backup server breach raises concerns over Kukkiwon data leak
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentOn November 2, it emerged that personal information held by Kukkiwon may have been leaked as a result of a breach of DOUZONE BIZON's backup server. Whether Kukkiwon's data was actually leaked and the extent of any impact have not been confirmed.
Related reports: 2 · last report →Theborn Korea warns of possible personal data leak after vendor server breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA breach of Douzone Bizon's backup server raised the possibility that personal information relating to Theborn Korea's business partners, current and former employees, and customer consultations had been leaked. There are indications that some encrypted data was exfiltrated, and the potentially leaked information includes resident registration numbers, bank account numbers, and customer consultation details. Theborn Korea announced the incident on November 2 and strengthened security measures while investigating whether a leak had occurred and who was affected.
Related reports: 9 · last report →Jeonbuk Culture & Tourism Foundation warns of possible leak of staff personal data
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible leak of resident registration numbers, account numbers, payroll and HR information of employees, business partner staff and others
On Nov. 2, the Jeonbuk Culture & Tourism Foundation announced the possible leak of personal data of employees and business partners in connection with the hacking of a Douzone Bizon backup server. The data concerned included resident registration numbers, bank account numbers and payroll and HR information. Whether the foundation's data was actually leaked externally has not been confirmed.
Read on 데일리시큐 ↗KEPCO ES warns of possible personal data leak after DOUZONE BIZON hack
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible leak of personal information, including resident registration numbers and contact details
KEPCO ES announced that personal information, including resident registration numbers and contact details, may have been leaked as a result of the DOUZONE BIZON hacking incident. KEPCO ES posted a notice about the potential personal data leak on its website on November 2.
Related reports: 4 · last report →Seoul childcare support center warns of possible staff and instructor data leak
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible leak of personal information, including resident registration numbers and bank account numbers, belonging to current and former employees, instructors, and others
The Seoul Support Center for Childcare announced on November 3 that personal information belonging to current and former employees, instructors, and others may have been leaked in a security breach of a Douzone Bizon backup server. The center said it had stopped using the backup server service on September 30, 2026, but data that Douzone Bizon had retained without deleting may have been affected by the incident.
Related reports: 4 · last report →Gwangju Foundation for Women & Family warns of possible data leak from external backup server
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentThe Gwangju Foundation for Women & Family announced a possible personal data breach on October 30 in connection with the hacking of a Douzone Bizon APO backup server. Signs of data exfiltration were identified on an external backup server storing the foundation’s operational information, and potentially exposed data included resident registration numbers, bank account numbers, and income information. Whether any data was actually leaked, who was affected, and the scale of the incident remained unconfirmed.
Read on 데일리시큐 ↗KAC Airport Service warns of possible data leak linked to Douzone Bizon breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentA security incident at the Douzone Bizon APO backup service used by KAC Airport Service revealed indications that some encrypted data on a backup server had been exfiltrated. KAC Airport Service issued a notice of a possible personal data leak on November 6. Whether its backup data and personal information were actually leaked has not been confirmed.
Read on 데일리시큐 ↗Douzone Bizon backup service breach may expose T1 players' personal data
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Potential leak of resident registration numbers, passport numbers, and salary records belonging to players and others
A breach of Douzone Bizon's backup service may have exposed personal information belonging to T1 players and others. T1 identified resident registration numbers, passport numbers, and salary records as potentially leaked data. An investigation is underway to determine whether any data was actually leaked.
Read on 제로위즈 매거진 ↗Douzone Bizon backup service breach raises data leak concerns at Jeonnam agency
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentThe Jeonnam Information & Culture Industry Promotion Agency was identified as an additional organization affected by the breach of Douzone Bizon’s backup service. A possible leak of the agency’s information became known, but the specific extent of the damage and the types of information leaked have not been confirmed.
Related reports: 2 · last report →AgileSoDA staff data potentially exposed in external backup server breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible exposure of employees' and executives' unique identification data, financial information, and personnel, payroll, and tax records
AgileSoDA was identified as another victim of the Douzone Bizon server breach. It is investigating the possible exposure of employees' and executives' unique identification data, financial information, and personnel, payroll, and tax records stored with an external backup service, while checking whether any data was actually exfiltrated. Information belonging to clients, including NH NongHyup Bank, was found not to have been leaked.
Related reports: 3 →Gwangju Tourism Organization warns of possible data leak after DOUZONE BIZON breach
↳ Knock-on damage from the DOUZONE BIZON incident · View original incidentImpact: Possible leak of personal information stored with an outsourced service
A security breach occurred in the systems of DOUZONE BIZON, an external service provider used by Gwangju Tourism Organization. The organization posted a notice on its website on November 11 because it could not rule out the possibility that personal information stored with the external service had been affected. No actual leak of personal information has been confirmed.
Related reports: 3 →
27 related reports
- 정부, 더존비즈온 해킹 '중대사고' 판단…민관합동조사단 조사 착수 - 머니투데이
- 정부 “더존비즈온 해킹 사태는 중대 사고”…민관 합동 조사 착수
- 과기정통부 “더존비즈온 2차례 침해사고, 민관합동조사단 조사 착수”
- 정부, 더존비즈온 해킹 ‘중대 사고’ 판단… 민관합동조사단 가동
- 과기부, 더존비즈온 해킹 ‘중대사고’ 판단...민관합동조사단 구성
- 더존비즈온 해킹 '중대 사고' 판단 … 정부, 민관합동조사 착수
- 토종 1위 ERP 더존비즈온 해킹…"고객사 민감정보 유출 가능성"
- 더존비즈온, 침해사고 후속 조치 공개…"160억원 보안 투자 진행"
- 더존비즈온 침해사고 ’중대’ 판단…합동조사 착수
- 더존비즈온, 서버 침해사고 확인…KISA·개인정보위 자진 신고
- ‘기업용 SW 업체’ 더존비즈온, 잇단 침해사고…민관합동 조사
- 더존비즈온 침해사고 합동조사…고객사 피해 확산 우려
- 더존비즈온 두 차례 침해사고 '중대' 판단…민관합동조사단 25일 조사 착수
- 더존비즈온, 서버 침해사고 확인…KISA·개인정보위 자진 신고 : 네이버 블로그
- 과기정통부, 더존비즈온 침해사고 조사단 가동…피해 규모 확인
- 더존비즈온 해킹 사고에 기업 고객 '촉각' … ERP 업무 차질에 고객 이탈 생길까
- 세무사회, 사이버 침해사고 대응 총력…"정보보안 전면 쇄신"
- 세무사회, 더존 침해사고에 공동 대응…세무사·납세자 정보보호 강화
- "중소기업 11만 곳 회계·급여 장부 뚫렸다"...세무회계법인 80%가 쓰는 더존비즈온 잇단 해킹, 정부 '중대 사고' 규정
- [전망] 더존비즈온 해킹 사태가 던진 충격파…과징금 10% 개정법 첫 시험대와 2027년 보안·ERP 지형도 '주목'
- [더존비즈온 사태] 급여 계좌부터 가족 주민번호까지... 더존비즈온 해킹이 ‘중대 사고’인 이유
- 더존비즈온 해킹, 어디까지 뚫렸나
- [더존비즈온 사태] 유출 의심 기업 현황
- [더존 해킹, 그 후①] "해킹은 더존에서, 피해는 고객사가"...보상도 쉽지 않다
- [더존 해킹, 그 후②] 고객사의 고객사 정보까지...해킹으로 드러난 개인정보 관리 사각지대
- 더존비즈온 백업 해킹 파장…유출 의심 28곳
- 더존비즈온 해킹 피해 확산...전남·전북 기관도 개인정보 유출 가능성 고지
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.