South Korean startup platform breach exposes key management failures
A South Korean government-backed startup platform suffered a data breach that exposed encrypted personal data after an encryption key was embedded directly in an API, negating the protection encryption was supposed to provide. Penta Security has publicly addressed the incident as an example of poor key management practice.
Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy