IDOM: its servers were accessed without authorization and the damage spread across a wide part of the network

1. 2023-03-30

   It confirmed unauthorized access to its servers. To stop the damage spreading it isolated the affected terminals from the network. [1] [2]

2. 2023-04-03

   It announced the case. [1] [2]

3. 2023-06-05

   It published the investigation results. The intrusion was on the night of March 29 and encryption in the early morning of March 30, and the investigation ended on May 13. It cannot rule out that 2,402,233 personal data records were viewed, but no trace of sending to outside was found. People concerned are notified by SMS. Its subsidiary IDOM CaaS Technology made a similar announcement. [3] [4] [5]

It is identifying the files accessed, investigating the cause and recovering in parallel, but because the damage spread across a wide part of the network, identifying everything, finishing the investigation and fully recovering daily operations is expected to take some time. It is working with the police and system companies. [1] [2]