INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Daehan BizOn hacked by Daehan's own employee, Ramtron Automotive
|
2026-10-31 18:41
MEDIUM
LOW
DATA BREACH
Executive Summary
AI-generated
A server intrusion incident occurred at Dozone Bizon, a subcontractor of Credito Automotive, on October 28th, when an external attacker accessed the encrypted data and partially extracted it. The possible leaked personal information includes customer name, contact, email address, etc., but the actual leaked information has not been confirmed yet. Deutche Bank's official dealer Ramtron Automotive was affected due to its relationship with Dozone Bizon, while Credito Automotive notified customers of a possibility that their personal information may have been leaked. The incident is attributed to a security vulnerability in Dozone Bizon's backup server, which allowed external unauthorized access. Shinhan Bank and Carrot Communications also took measures after the incident occurred on October 30th, with Shinhan shutting down its backup server and blocking overseas IP access immediately.
Technical Mitigations AI-generated
• Patch the vulnerability in Dozone Bizon's backup solution immediately to prevent unauthorized access.
• Block overseas IP access for Shinhan Bank's backup server after a cyber attack.
• Implement measures to prevent recurrence, such as encryption key management and secure data storage, for subcontractors like Credito Automotive.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
GB
automotiveautomotive
financefinance
Incident Timeline
October 28th
Deutche Bank's official dealer Ramtron Automotive experienced a potential customer personal information leak possibility following the Daehan BizOn hacking incident, which was reported to them at 10:26 pm on October 28th.
October 30th
Credito Automotive posted a notice on October 30th stating that a security vulnerability in the backup server led to the intrusion incident affecting Dozone Bizon's personal information.
Click on any entity below to view its context and source!
organisation
Personal Information'
Credito Automotive posted a notice on October 30th, 'Notification and Notification Letter of the Possibility of Leaking of Dozone Bizon's Personal Information', stating that a security vulnerability in the backup server led to the intrusion incident.
2026/10/31
Shinhan Bank has taken security measures after a cyber attack, including shutting down its backup server and blocking overseas IP access immediately.
Click on any entity below to view its context and source!
organisation
Deutche Bank
Deutche Bank official dealer Ramtron Automotive, customer personal information leak possibility... Daehan BizOn hacking aftermath..
organisation
Shinhan Bank
Shinhan Bank has taken security measures after a cyber attack, including shutting down its backup server and blocking overseas IP access immediately after the incident occurred.
organisation
IP
Shinhan Bank has taken security measures after a cyber attack, including shutting down its backup server and blocking overseas IP access immediately after the incident occurred.
organisation
Carrot Communications
Carrot Communications, another company, has also taken security measures, requiring the subcontractor to implement measures to prevent recurrence and requesting the results of the measures taken.
organisation
Bentley
Carrot Communications, established in 2006, is the official distributor in Korea of the luxury British automobile brand Bentley.
Intelligence Sources
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-11-01T07:18
Comprehensive Tactical Telemetry
Highly Correlated Entities
6x
organisation
Identified Entity
Deutche Bank
entity
3x
timeline
Temporal Reference
October 30th
date
2x
industry
Targeted Sector
Finance
sector
Contextual Telemetry
Context Block
2 METRICS
tactic
Cyber Operation Type
Phishing
tactic
target region
Target Country
United Kingdom
country
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.