Security · November 15, 2026
Gwangju Tourism Corporation notifies of potential personal data breach due to Duzon Bizon hacking incident
Gwangju Tourism Corporation has officially alerted about a potential personal data breach following a security incident involving the external contractor Duzon Bizon. As of now, there has been no confirmation that Gwangju Tourism Corporation's personal data has actually been compromised, but it cannot be ruled out that information stored in external services may have been affected.
On November 11, Gwangju Tourism Corporation posted a notice on its official website titled 'Notification of suspected personal data breach due to contractor (Duzon Bizon) security incident.' This notice was issued under the name of the Audit Information Team.
The corporation explained that they received guidance indicating an external security incident occurred in the Duzon Bizon services utilized for some processing tasks.
Importantly, the corporation emphasized that this notification does not confirm a personal data breach. It is a precautionary measure to inform data subjects of the possibility that personal data stored by Duzon Bizon may have been compromised.
The incident originated not from Gwangju Tourism Corporation's own systems but from Duzon Bizon, a provider of external services. Duzon Bizon reported on October 23 that there had been illegal external access to its APO backup service servers, suggesting a possibility of personal data breach.
At that time, Duzon Bizon confirmed that some encrypted data stored on the backup server had been exported externally. However, no evidence was found indicating that encryption keys had been compromised, and investigations regarding affected clients and the extent of personal data are ongoing.
The corporation has formed an incident response team to prepare for the potential personal data breach. If a confirmed breach occurs based on Duzon Bizon's investigation results, the corporation plans to issue a detailed notice and individually inform affected data subjects.
Gwangju Tourism Corporation has urged individuals not to respond to text messages or calls requesting passwords, authentication numbers, or account numbers supposedly from Gwangju Tourism Corporation or Duzon Bizon, and to avoid accessing unclear internet links.