Bleepingcomputer South Korean Startup Platform Breach Exposes Personal Data and Key Management Failures
Article Content
- •A data breach at South Korea's Modu-ui Changup exposed personal data of 5,000 applicants.
- •The breach was caused by the exposure of an encryption key through an API, allowing data access.
- •Multiple recent breaches at small and midsize startups indicate widespread security vulnerabilities.
In July 2026, South Korea's Modu-ui Changup platform experienced a data breach due to poor encryption key management, exposing personal information of 5,000 applicants, including email addresses and startup ideas. The breach was linked to the exposure of an encryption key through an API, which was accessed by external parties using web crawling techniques. The Ministry of SMEs and Startups confirmed the leak on June 18, and an investigation was launched involving multiple agencies. Other recent breaches at small and midsize companies, including JLS and Fly, have raised concerns about data security across the sector. These incidents highlight vulnerabilities in encryption practices and the need for better security measures in startups. Investigations into the breaches are ongoing, with authorities identifying 39 IP addresses involved in accessing the leaked data.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Jaranda in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…