Minister Han Seong-sook of the Ministry of SMEs and Startups delivers congratulatory remarks at the launch ceremony for the first cohort of Everyone's Startup at SVC Seoul in Mapo-gu, Seoul, on the 16th./Courtesy of News1

A personal data leak occurred in the government's startup support program "Everyone's Startup." It was confirmed that startup ideas and evaluation comments were also exposed.

According to a text message obtained by ChosunBiz on the 18th, the Korea Institute of Startup and Entrepreneurship Development (KISED), which oversees "Everyone's Startup," notified all 5,000 cohort-one successful applicants around 12 p.m. that day of the personal data leak and apologized. In the text, the KISED said, "Customer personal information was leaked through an unauthorized route." The information confirmed leaked so far includes email addresses, business ideas, and evaluation comments.

A text message apologizing for a personal data leak sent to first-cohort admittees by the Korea Institute of Startup and Entrepreneurship Development (KISED), which oversees Everyone's Startup./Courtesy of Reader

The personal data leak is estimated to have occurred between 9 a.m. and 4 p.m. on the 15th. The Everyone's Startup side said, "Indications were found that some IPs accessed nonpublic information." However, the specific intrusion method or security vulnerabilities have not yet been identified.

Everyone's Startup said it completely blocked access via unauthorized routes immediately after the personal data leak occurred. It also said it blocked AI-based automated data collection attempts and, in cooperation with external expert agencies such as the National Cybersecurity Center, conducted investigation, analysis, and security checks.

Cohort-one successful applicants of Everyone's Startup whose personal information was leaked are worried that their startup ideas and evaluation comments could be used externally. Participants shared on social media (SNS), "Was 'Everyone's Startup' meant to make everyone's ideas public and use them as startup items?" and "My startup item has become a public good."

A cohort-one successful applicant, identified as A, said, "They said they blocked external data collection attempts, but as I understand it, email collection via the API was still possible the next day (on the 16th)," adding, "The response was lax."

The KISED is currently receiving damage reports.

An official from the Ministry of SMEs and Startups in charge of this project said, "We are currently identifying the situation regarding the detailed leaked content," adding, "We will disclose details as soon as they are confirmed."

※ This article has been translated by AI. Share your feedback here.