INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

KISA Warns of Data Leaks via Dozone BizOn Service

| 2026-11-02 21:25 CRITICAL LOW DATA BREACH
Executive Summary
AI-generated
On November 2, 2026, the Korea Internet & Security Agency (KISA) issued a warning about potential personal data leaks due to hacking incidents involving the Dozone BizOn service. The Korea Institute of Taxation has notified the possibility of personal information leakage related to the use of this service for administrative affairs. Approximately 1 million resident registration numbers and bank account information may have been exposed, affecting individuals in South Korea. The attack works by exploiting vulnerabilities in the encrypted data stored on an APO backup server, resulting in unauthorized access to sensitive information. As of now, KISA is urging caution on receiving suspicious contacts, while NISA continues its investigation into the incident, including verifying whether the Korea Institute of Taxation's data was included in the leaked information and confirming the circumstances surrounding the leak.
Technical Mitigations AI-generated
• Patch the Dozone BizOn ERP backup service to address potential vulnerabilities. • Block overseas IP access for the APO backup server until further investigation is conducted. • Implement additional security measures, such as two-factor authentication and encryption key management, to prevent unauthorized data leaks.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope financefinance
Incident Timeline
‎2026/11/02
Korea Institute of Taxation has notified the possibility of personal information leakage due to a security incident related to the use of the Dozone Bizon ERP backup service for administrative affairs.
organisation the Korea Internet & Security Agency
organisation KISA
organisation Korea Institute of Taxation
organisation the Dozone Bizon ERP
organisation the Korea Institute of Taxation's
organisation APO
organisation the National Information Society Agency
organisation NISA