INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Central Power Service Investigates Potential Data Breach of Doosan BizOn

| 2026-11-02 01:19 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
Central Power Service has informed its employees about the potential leakage of personal information due to the APO backup server breach of Doosan BizOn. The company is conducting an investigation into the potential impact on its own business and has confirmed that no actual personal information has been leaked so far. Central Power Service posted a notice on its website on October 30th morning stating that 'Security Notice for Doosan BizOn Employees Regarding Backup Server Breach'. According to the company, a security management vendor for its ERP system, Doosan's APO backup server, has confirmed the potential leakage of personal information.
Technical Mitigations AI-generated
• Block overseas IP access to prevent further intrusion and expansion of damage. • Force shutdown of the affected server to prevent further data leakage. • Conduct a separate investigation into the circumstances surrounding the leak of the encryption key.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎October 30th
Threat actors exploited a vulnerability in the backup server to gain unauthorized access, prompting Central Power Service to issue a security notice.
tactic T1584.004 - Server
Central Power Service posted a notice on its website on October 30th morning stating that 'Security Notice for Doosan BizOn Employees Regarding Backup Server Breach'.
‎2026/11/02
Threat actors used an unknown method to obtain the encryption key for Daewoo Biz On's APO backup server, leading to a potential leakage of personal information.
organisation Central Power Service
Central Power Service, Daewoo Biz On, Hacked... Risk of Disclosing Personal Information of Former Employees.
organisation Daewoo Biz On
Central Power Service, Daewoo Biz On, Hacked... Risk of Disclosing Personal Information of Former Employees.
organisation APO
Central Power Service has informed its employees about the potential leakage of personal information due to the APO backup server breach of Doosan BizOn.
organisation Doosan
Central Power Service has informed its employees about the potential leakage of personal information due to the APO backup server breach of Doosan BizOn.
organisation ERP
According to the company, a security management vendor for its ERP system, Doosan's APO backup server, has confirmed the potential leakage of personal information.
organisation IP
The data stored on the backup server was all encrypted, and the circumstances of the leak of the encryption key were also not discovered, as explained. DoT (DoT) reported that it had blocked the overseas IP access and forced the shutdown of the affected server to prevent further intrusion and expansion of damage, and had reported to KISA (Korea Internet & Security Agency).
organisation KISA
The data stored on the backup server was all encrypted, and the circumstances of the leak of the encryption key were also not discovered, as explained. DoT (DoT) reported that it had blocked the overseas IP access and forced the shutdown of the affected server to prevent further intrusion and expansion of damage, and had reported to KISA (Korea Internet & Security Agency).
organisation Korea Internet & Security Agency
The data stored on the backup server was all encrypted, and the circumstances of the leak of the encryption key were also not discovered, as explained. DoT (DoT) reported that it had blocked the overseas IP access and forced the shutdown of the affected server to prevent further intrusion and expansion of damage, and had reported to KISA (Korea Internet & Security Agency).
organisation Central Power Services
Central Power Services reported that, as confirmed, the additional investigation results, the separate guidance to the employees is a plan.
Intelligence Sources
Dailysecu 2026-11-02