A public-private joint investigation team is being formed over a security incident involving enterprise software company Douzone Bizon, with attention focused on the scale of the breach and any data leakage.

The company said a breach occurred in its APO backup service and in its Smart A 10 (Smart A 10) cloud-based management solution service.

In Smart A 10, an internal probe found indications such as records showing that, on Oct. 15, 2026, an unidentified person used a virtual private network (VPN) account to access internal systems without authorisation and view data.

Douzone Bizon posted a notice on its website on Oct. 18 and said it was difficult to identify customer companies and data subjects affected by any leakage so far. It said the notice did not mean leakage had been confirmed, but was to notify customers in advance of the possibility of leakage to prevent damage.

Douzone Bizon issued an additional notice on its website on Oct. 23 and shared the fact and circumstances of the APO backup service breach.

The company said it asked Ahsay, the backup solution provider, about the matter and was told by Ahsay that the backup solution had a vulnerability.

Douzone Bizon then conducted an internal investigation and confirmed indications that some encrypted data on the backup server was taken out through the vulnerability. It added that, as of Oct. 23, affected customer companies and data subjects had not been identified.

It said that if personal information was included in what was stored on the backup server, there was a possibility of leakage, and that the actual targets and items of any leakage could vary depending on investigation results. It said all data stored on the backup server was encrypted and no indications were found that the encryption key had been leaked.

Douzone Bizon reported the incident to the government twice. After that, the Ministry of Science and ICT and the Korea Internet & Security Agency (KISA) demanded preservation of relevant materials and have been investigating the cause of the incident and the scale of damage.

Based on this, the ministry held an emergency meeting of the Incident Investigation Review Committee on Oct. 25. It judged the incident to be a major one and concluded that it was necessary to form a public-private joint investigation team. The Incident Investigation Review Committee is a statutory committee set up to enable pre-emptive responses to security incidents.