INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Dooja Bizon's Hack Exposes Vulnerabilities at National Museum Complex

| 2026-10-31 18:24 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
South Korea's National Museum of Central Seoul Complex Integrated Operations Support Center has launched an investigation into the potential leak of personal data stored on a backup server of Doosan BizOn, a subsidiary of Doosan Group. The affected individuals are estimated to be those whose resident registration numbers and account numbers were stored in the accounting management program operated by Doosan BizOn since last 28 days. As of now, the actual leak of personal data has not been confirmed, but the Support Center warned that if leaked, secondary damage such as phishing emails, smishing messages, and agency impersonation phone calls may occur. The server has been forcibly shut down, and IP addresses have been blocked overseas to prevent further potential misuse.
Technical Mitigations AI-generated
• Audit (ATT&CK mitigation for Phishing): Perform audits or scans of systems, permissions, insecure software, insecure configurations, etc. • User Training (ATT&CK mitigation for Impersonation): Train users to be aware of impersonation tricks and how to counter them, for example confirming incoming requests through an independent platform like a phone call or in-
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
Incident Timeline
‎October 30
The National Museum of Central Seoul Complex Support Center posted a notice on its official website stating that it had received a report indicating potential personal data leaks.
organisation the Support Center
The National Museum of Central Seoul Complex Integrated Operations Support Center (hereinafter referred to as the Support Center) announced on October 30 that it had posted a notice on its official website regarding the potential leak of personal data, stating that it had received a report that some personal data stored on a backup server for an accounting management program operated by Doosan B…
‎2026/10/31
Threat actors used a backup server of Doosan BizOn, a subsidiary of Doosan Group, to store and potentially leak personal data.
organisation Doosan Group
South Korea's National Museum of Central Seoul Complex Integrated Operations Support Center has launched an investigation into the potential leak of personal data stored on a backup server of Doosan BizOn, a subsidiary of Doosan Group.
organisation Possibility of Personal Data Leaks
Exclusive: Possibility of Personal Data Leaks from National Museum Complex Notified...
organisation National Museum Complex Notified
Exclusive: Possibility of Personal Data Leaks from National Museum Complex Notified...
organisation the Support Center
The Support Center said that the data in question includes the names of other income earners or business income earners, resident registration numbers, account numbers, and deposit account names.
organisation IP
The server has been forcibly shut down, and the IP addresses of the affected parties have been blocked overseas.
organisation Support Center and
Support Center and More Business On have taken measures to terminate the server in question and block access from overseas IP addresses immediately after recognizing the potential for leakage.
organisation Business On backup
This announcement highlights the case of a public institution using the actual service, which is related to the previously disclosed More Business On backup service breach incident, and emphasizes that this is an example of a public institution officially acknowledging the potential for personal information leakage.
Intelligence Sources
Dailysecu 2026-10-31