GoKawiilEncryption key exposed in API led to breach of South Korea's Modu-ui Changup startup platform
South Korea's government-backed startup support platform, Modu-ui Changup, suffered a data breach that exposed personal information and startup idea summaries of roughly 5,000 successful applicants. Investigators from the Ministry of SMEs and Startups, National Intelligence Service, Cyber Security Center and National Police Agency traced the root cause to an encryption key that had been embedded in an API response, allowing an outside party to harvest it via web crawling and decrypt supposedly protected data.