Key facts
- A cyberattack compromised the Korea National Diplomatic Academy's online education system.
- Personal data of South Korean diplomats and officials is presumed to have been leaked.
- The breach occurred between April/May last year and February this year.
- Authorities are investigating potential involvement of foreign state-backed hacking groups, including North Korea.
- The full extent of the data leak and specific information affected are still being determined.
South Korea's Foreign Ministry has confirmed that a significant amount of personal data appears to have been exposed in a cyberattack on the Korea National Diplomatic Academy's online education system. Authorities are investigating the breach, which occurred between April and May of last year and continued until February of this year, exploiting a zero-day vulnerability. While the full extent of the leak and the specific data compromised are still under investigation, initial findings suggest a considerable scale of data exposure, potentially affecting around 10,000 records of current and former diplomats and officials.
No misuse of the leaked data has been confirmed, and the ministry stated there is insufficient technical evidence to definitively identify the perpetrators. However, possibilities including foreign state-backed hacking groups, and specifically North Korea, are being examined. The system, which stored training videos and administrative information, has been blocked, and the ministry is collaborating with relevant agencies to enhance cybersecurity measures.