South Korean exchange Flybit breached via Daou groupware, leaking 40 customers' resident ID numbers as third known victim

Boannews reports Korea Digital Exchange, operator of crypto exchange Flybit, said on November 5 that unauthorized external access via its groupware operator Daou Technology leaked personal data of 40 customers contained in attachments to agency information-request emails, including names, resident registration numbers and contacts ^[1]. Seoul Economic Daily reports the attacker gained access on November 1 via Daou Tech and some customers' tax-related data was also exposed ^[2]; Boannews notes Bithumb and Hanyang Securities earlier leaked data in zero-day attacks exploiting weak access control in Daou groupware ^[1]. Organizations using Daou groupware can follow the victims' steps: allow connections only from authorized internal IPs, temporarily block overseas IPs, and apply emergency security patches with the solution vendor ^[1][3].

Industries mainly affected: Finance

1. Organizations using Daou groupware should restrict access to authorized internal IPs and temporarily block overseas IP access if needed .