INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
KISA Warns of Data Leaks via Dozone BizOn Service
Executive Summary
AI-generated
On November 2, 2026, the Korea Internet & Security Agency (KISA) issued a warning about potential personal data leaks due to hacking incidents involving the Dozone BizOn service. The Korea Institute of Taxation has notified the possibility of personal information leakage related to the use of this service for administrative affairs. Approximately 1 million resident registration numbers and bank account information may have been exposed, affecting individuals in South Korea. The attack works by exploiting vulnerabilities in the encrypted data stored on an APO backup server, resulting in unauthorized access to sensitive information. As of now, KISA is urging caution on receiving suspicious contacts, while NISA continues its investigation into the incident, including verifying whether the Korea Institute of Taxation's data was included in the leaked information and confirming the circumstances surrounding the leak.
Technical Mitigations AI-generated
• Patch the Dozone BizOn ERP backup service to address potential vulnerabilities.
• Block overseas IP access for the APO backup server until further investigation is conducted.
• Implement additional security measures, such as two-factor authentication and encryption key management, to prevent unauthorized data leaks.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope