Boannews reports NHN Dooray announced on Nov 13 that attempted account access by an outsider was detected early that morning and emergency security measures were taken to protect private and public-sector customer accounts [1]. The company said it confirmed unauthorized external account access and abnormal calls using API keys, revoked all existing service and admin API keys, and the APIs are currently unavailable; the scope, cause and whether personal data leaked are still under investigation [1]. What to do now: existing Dooray service and admin API keys no longer work, so API customers should watch official notices; the company says service will resume after stabilization and it will notify customers and authorities if further damage is found [1].
NHN collaboration platform Dooray hit by outside account intrusion; all API keys revoked and API service suspended
1 min read
- Disclosed
- Nov 13, 2026
- Published
- Nov 13, 2026
- Last updated
- Nov 13, 2026
- CVSS basis
- Our assessment
- Attack vector
- Impact
- Actor type
- Motivation
On this page
30-second summary
What happened
Who is affected
Industries mainly affected: Government, Technology
What to do nowOur advice
- All existing Dooray service and admin API keys have been revoked and the APIs are unavailable; watch Dooray official notices for service restoration [1].
- The company says it will notify customers and authorities if further damage is found; watch for follow-up notices .
Timeline
- Dooray announces unauthorized account access and revokes API keys[1]
Technical details
References
Media1
- [1]보안뉴스 (Boannews)2026-11-13Accessed 2026-11-13Snapshot 2026-11-13 sha256 fb0131f9742e
“이날 새벽 외부인 계정 접근 시도가 확인돼 민간 및 공공 고객사 계정 보호 및 추가 피해 예방을 위한 긴급 보안 조치를 진행했다”
This site aggregates public information and is not security consulting advice. Test remediation steps before applying.