South Korean Startup Platform Breach Exposes Personal Data and Key Management Failures

In July 2026, South Korea's Modu-ui Changup platform experienced a data breach due to poor encryption key management, exposing personal information of 5,000 applicants, including email addresses and startup ideas. The breach was linked to the exposure of an encryption key through an API, which was accessed by external parties using web crawling techniques. The Ministry of SMEs and Startups confirmed the leak on June 18, and an investigation was launched involving multiple agencies. Other recent breaches at small and midsize companies, including JLS and Fly, have raised concerns about data security across the sector. These incidents highlight vulnerabilities in encryption practices and the need for better security measures in startups. Investigations into the breaches are ongoing, with authorities identifying 39 IP addresses involved in accessing the leaked data.

Key Points: • A data breach at South Korea's Modu-ui Changup exposed personal data of 5,000 applicants. • The breach was caused by the exposure of an encryption key through an API, allowing data access. • Multiple recent breaches at small and midsize startups indicate widespread security vulnerabilities.