INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Naver's Data Breach Raises Concerns Over Effectiveness of Security Measures

| 2026-10-30 07:45 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
A recent hacking incident at Bithum, South Korea's virtual asset trading platform, has raised concerns over the effectiveness of its data breach prevention measures. The incident occurred on October 27 when an unauthorized external user accessed DaouOffice, a mobile groupware used by employees, and extracted personal information and files without permission. As a result, approximately 844 individuals had their personal information disclosed, including name, mobile phone number, email address, resident registration number, driver's license number, account number, and a copy of their ID card. Bithum has increased its information protection investment by 2.6 times over the past five years and expanded its security team personnel by more than four times, but these efforts have been insufficient to prevent such incidents from occurring.
Technical Mitigations AI-generated
• Patch DaouOffice to address the vulnerability that allowed unauthorized external users to access internal mobile groupware. • Implement a more robust security management system for customer information being stored and shared in internal systems, including regular inspections of internal control processes. • Conduct thorough vulnerability assessments on all internal systems, including ISMS-P certified personal information protection management systems.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎2025/10/30
Naver's data breach disclosure has raised concerns over the effectiveness of its increased security investment and personnel, following a review by the Korea Internet & Security Agency.
general_metric 2.6 times
According to the Korea Internet & Security Agency (KISA) information protection materials, Naver's information protection investment amount has increased by 2.6 times from 4,683,010,000 won in 2020 to 12,369,200,000 won last year.
attribution the Korea Internet & Security Agency
According to the Korea Internet & Security Agency (KISA) information protection materials, Naver's information protection investment amount has increased by 2.6 times from 4,683,010,000 won in 2020 to 12,369,200,000 won last year.
organisation KISA
According to the Korea Internet & Security Agency (KISA) information protection materials, Naver's information protection investment amount has increased by 2.6 times from 4,683,010,000 won in 2020 to 12,369,200,000 won last year.
organisation Naver
According to the Korea Internet & Security Agency (KISA) information protection materials, Naver's information protection investment amount has increased by 2.6 times from 4,683,010,000 won in 2020 to 12,369,200,000 won last year.
general_metric 30 %
Last year's investment amount is more than 30% higher than the average information protection investment amount of the financial and insurance industries, which is around 9,500,000,000 won.
general_metric 9,500,000,000 industries
Last year's investment amount is more than 30% higher than the average information protection investment amount of the financial and insurance industries, which is around 9,500,000,000 won.
data_breach 10 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
general_metric 7 internal
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
data_breach 3 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
data_breach 31 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
general_metric 28 internal
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
data_breach 42 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
data_breach 35 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
data_breach 6 members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
general_metric 6.8 %
The proportion of security dedicated personnel in the overall IT personnel also reached 10.7% last year, exceeding the average of 6.8% for the entire company.
‎2026/10/02
The Financial Supervisory Service has begun a 28-day on-site inspection of NongHyup Bank to investigate the cause and extent of damage from an unspecified incident.
organisation The Financial Supervisory Service
The Financial Supervisory Service has begun a on-site inspection of NongHyup Bank from 28 days ago to investigate the cause of the incident and the extent of the damage.
organisation NongHyup Bank
The Financial Supervisory Service has begun a on-site inspection of NongHyup Bank from 28 days ago to investigate the cause of the incident and the extent of the damage.
‎October 27
Threat actors used unauthorized external access to extract personal information and files from DaouOffice on October 27.
organisation DaouOffice
According to a report from the virtual asset industry on October 30, Bithum confirmed on October 27 that an unauthorized external user had accessed its internal mobile groupware, DaouOffice, and extracted personal information and files without permission.
‎October 30
Bithum confirmed on October 27 that an unauthorized external user had accessed its internal mobile groupware, DaouOffice.
organisation DaouOffice
According to a report from the virtual asset industry on October 30, Bithum confirmed on October 27 that an unauthorized external user had accessed its internal mobile groupware, DaouOffice, and extracted personal information and files without permission.
Tactical Metrics
Metrics
data_breach
10
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Metrics
data_breach
3
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Metrics
data_breach
31
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Metrics
data_breach
42
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Metrics
data_breach
35
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Metrics
data_breach
6
Members
Naver's security dedicated personnel have expanded from 10 members (7 internal, 3 outsourced) in 2020 to 31 members (28 internal, 3 outsourced) in 2024, and 42 members (35 internal, 6 outsourced) last year.
Intelligence Sources
Chosun Economy 2026-10-30