INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Daehan BizOn hacked by Daehan's own employee, Ramtron Automotive

| 2026-10-31 18:41 MEDIUM LOW DATA BREACH
Executive Summary
AI-generated
A server intrusion incident occurred at Dozone Bizon, a subcontractor of Credito Automotive, on October 28th, when an external attacker accessed the encrypted data and partially extracted it. The possible leaked personal information includes customer name, contact, email address, etc., but the actual leaked information has not been confirmed yet. Deutche Bank's official dealer Ramtron Automotive was affected due to its relationship with Dozone Bizon, while Credito Automotive notified customers of a possibility that their personal information may have been leaked. The incident is attributed to a security vulnerability in Dozone Bizon's backup server, which allowed external unauthorized access. Shinhan Bank and Carrot Communications also took measures after the incident occurred on October 30th, with Shinhan shutting down its backup server and blocking overseas IP access immediately.
Technical Mitigations AI-generated
• Patch the vulnerability in Dozone Bizon's backup solution immediately to prevent unauthorized access. • Block overseas IP access for Shinhan Bank's backup server after a cyber attack. • Implement measures to prevent recurrence, such as encryption key management and secure data storage, for subcontractors like Credito Automotive.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
GB
automotiveautomotive financefinance
Incident Timeline
‎October 28th
Deutche Bank's official dealer Ramtron Automotive experienced a potential customer personal information leak possibility following the Daehan BizOn hacking incident, which was reported to them at 10:26 pm on October 28th.
‎October 30th
Credito Automotive posted a notice on October 30th stating that a security vulnerability in the backup server led to the intrusion incident affecting Dozone Bizon's personal information.
organisation Personal Information'
‎2026/10/31
Shinhan Bank has taken security measures after a cyber attack, including shutting down its backup server and blocking overseas IP access immediately.
organisation Deutche Bank
organisation Shinhan Bank
organisation IP
organisation Carrot Communications
organisation Bentley