INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Dojzon Bizon hacks K-Auction's backup server exposing employee info

| 2026-11-01 16:23 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
South Korean auction house K-Auction (K-Auction) has announced that there is a possibility that personal information of its employees and individuals with whom it had a trading relationship may have been leaked due to a cyber attack on its backup server by Dojzon Bizon. Specifically, K-Auction revealed that it had stopped using Dojzon Bizon's cloud services in May, but the related data was still stored on the backup server. K-Auction posted a notice on its website at 5:30 pm on October 31, stating that there was a possibility that its personal data may have been exposed due to unauthorized access to the backup server.
Technical Mitigations AI-generated
• Patch Dojzon Bizon's backup solution to fix the vulnerability exploited by the attacker. • Regularly review and verify that personal data is properly deleted after a cloud and backup services contract termination, as in the case of K-Auction with Dojzon Bizon. • Utilize the Personal Information Exposure Prevention System provided by the Financial Supervisory Service to detect potential impersonation attempts through phone, text, and email.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
financefinance
Incident Timeline
‎May 1
Threat actors used Dojzon Bizon's cloud and backup services to target Korean bank Doosan prior to its contract termination on May 1.
‎May 2026
Threat actors impersonated individuals with ties to K-Auction through phone, text, and email.
organisation the Signature Misuse Prevention Service
Korea Oxygen urged financial institutions and companies to be cautious of impersonating them through phone, text, and email, and to utilize the Personal Information Exposure Prevention System and the Signature Misuse Prevention Service provided by the Financial Supervisory Service.
organisation the Financial Supervisory Service
Korea Oxygen urged financial institutions and companies to be cautious of impersonating them through phone, text, and email, and to utilize the Personal Information Exposure Prevention System and the Signature Misuse Prevention Service provided by the Financial Supervisory Service.
‎October 28
Threat actors exploited a vulnerability in the backup server to access Doosan's stored personal data six months after its K-secure service contract was terminated.
‎October 31
K-Auction posted a notice on its website at 5:30 pm, stating that there was a possibility that its personal data may have been exposed due to unauthorized access to the backup server.
‎2026/11/01
Dojzon Bizon conducted a cyber attack on K-Auction's backup server, potentially exposing personal information of its employees and trading partners.
organisation Doosan
Korean bank, Doosan, has announced that it is warning of the possibility of personal data leaks due to a K-secure personal information protection service contract termination.
organisation K-Auction
Despite 6 months having passed since the service was terminated, some data remains.. South Korean auction house K-Auction (K-Auction) has announced that there is a possibility that personal information of its employees and individuals with whom it had a trading relationship may have been leaked due to a cyber attack on its backup server by Dojzon Bizon.
Intelligence Sources
Dailysecu 2026-11-01