SANDS Lab launches IDPW personal information breach alerts, addressing the root cause of breach incidents

SANDS Lab launches IDPW personal information breach alerts, addressing the root cause of breach incidents

• Addressing the root cause secures a critical response window before leaked information is exploited
• Rapid collection and notification of the latest information, with unmatched data accuracy and freshness
• Domain-based monitoring also supports breach management for businesses with tens of thousands of customers or more

Photo 1. The IDPW launch showcase hosted by SANDS Lab

AI security specialist SANDS Lab (KOSDAQ 411080, CEO Kim Ki-hong) officially launched IDPW on the 22nd and unveiled it for the first time at a media showcase. The service redefines the response to personal information breaches, which have recently become a central information security issue in Korea.

The launch of IDPW was prompted by credential stuffing, a common factor identified in a recent series of major breaches. Even large companies have been unable to stop these attacks, and complete protection using existing security systems alone is virtually impossible. As a result, breaches and losses recur, while companies that leak personal information also face substantial administrative fines.

SANDS Lab identified the lack of a way to recognize breaches immediately as the underlying reason for missing the critical response window. It therefore placed “data direct from the source” and real-time “alerts” at the center of its approach, reflecting its confidence in the accuracy enabled by its data coverage and the freshness of its latest breach information.

According to a company representative, although IDPW currently holds more than approximately 430 billion source data records, its core strength is not sheer volume but its advanced data collection and refinement capabilities, which keep that data current. Its rich information includes not only IP addresses and URLs but also application and device details. Integration with security systems such as NDR, WAF, SIEM and SOAR can therefore enable detection and blocking of credential stuffing attempts.

Photo 2. IDPW service overview: securing the critical response window before leaked personal information passes through distribution channels and is used in actual crimes.

Free services such as existing personal information breach lookup tools have largely been ineffective, with data that is not updated or is updated slowly, limiting them to checking whether a breach occurred in the past. IDPW, however, quickly extracts the latest data collected from the illicit distribution of personal information on the dark web, Telegram and other channels, and immediately alerts users. Its aim is to ensure that users can act before the leaked information is used in actual crimes and avoid missing the opportunity to respond.

Photo 3. An alert received when an actual information breach occurs. Alerts can be sent through various channels, including email, social media, internal messengers and SMS.

Users can receive alerts through their preferred channels, including email, SMS, internal messengers and social media, allowing them to recognize an actual breach immediately. As a web-based service accessible from a PC or mobile device anytime and anywhere, IDPW is also designed to be easy and convenient for anyone to use without security expertise.

Businesses have a particular reason to use IDPW more actively: it supports monitoring by corporate service domain. Companies can monitor breaches involving the member information held by their services, enabling telecommunications, finance and e-commerce businesses managing thousands to tens of thousands of customers or more to respond swiftly when sensitive customer information is leaked.

Photo 4. SANDS Lab CEO Kim Ki-hong introduces IDPW to the media.

SANDS Lab CEO Kim Ki-hong said, “Large-scale personal information breaches are no longer a problem affecting only individual companies. They are a serious threat that can expose the entire population to various crimes in real time, so we have launched a service that meets the needs of individuals, businesses and institutions alike.” He added, “From deepfake detection services such as FakeCheck onward, SANDS Lab has consistently provided practical solutions to major social problems through our innovative technology and distinctive philosophy. I am confident that IDPW will likewise establish itself as an essential global service for responding to personal information breaches.”