Data Breach Affects South Korean Diplomats
The South Korean Foreign Ministry has revealed that the personal information of all its diplomats, including retirees, has been presumed leaked due to a data breach at an online education system run by the Korea National Diplomatic Academy (KNDA).
The ministry was notified in early February about suspicious access to the online education system by a relevant government agency. Upon receiving the notification, the ministry immediately shut down the system, which has remained offline since.
An investigation is currently underway to determine the extent of the breach. The compromised server is believed to have stored educational videos and information on trainees, including their names, user IDs, positions, email addresses, and encrypted passwords.
According to officials, the compromised server is thought to have been accessed by an unidentified hacker sometime between April and May last year and maintained that access until February. The hacker is believed to have exploited a vulnerability in the system to gain unauthorized access.
The compromised server is believed to have stored information on approximately 10,000 records of personal data. However, officials have noted that not all the data stored in the system has been compromised, and the 10,000 figure represents the maximum possible number of cases affected.
While officials have stated that no sensitive personal data, such as identification numbers, mobile phone numbers, or home addresses, appeared to be affected, there may be some overlap among the individuals whose information was compromised.
The ministry currently lacks the technical analysis needed to identify the attacker. Officials have stated that they do not rule out any possibility, including involvement by overseas hacker groups, and regard this as a situation with implications for national security.
The Korea National Diplomatic Academy (KNDA) is an institution affiliated with the South Korean Foreign Ministry, and its online education system is used by ministry personnel, including retirees, as well as officials from other government agencies who are deployed to South Korea’s overseas missions.
The compromised server also stored information on officials from other government agencies who had been deployed to South Korea’s overseas missions. This is because these officials occasionally use the system for training purposes.
The data breach is a significant concern for the South Korean government, as it has the potential to compromise national security. The government has vowed to take all necessary steps to prevent such incidents in the future.
The investigation into the data breach is ongoing, and officials are working to identify the attacker and determine the extent of the breach. The ministry has promised to provide updates on the situation as more information becomes available.
