South Korea’s government-backed startup platform, Modu-ui Changup, suffered a data breach after an API exposed an encryption key, allowing encrypted personal information and startup idea summaries to be disclosed. The incident shows that encryption is not enough without secure key management, and authorities linked the leak to about 5,000 successful applicants and continued investigating possible AI-based crawling activity. #Modu-uiChangup #MinistryofSMEsandStartups #D.AMO #PentaSecurity
Keypoints
- The breach affected South Korea’s government-backed startup support platform, Modu-ui Changup.
- An API exposed an encryption key, which led to the disclosure of protected data.
- About 5,000 successful applicants had email addresses and startup idea summaries exposed.
- Investigators found that private email data could be obtained through AI-based web crawling.
- The incident highlights the need for separate, centralized encryption key management.