South Korea’s National Security Adviser Provides Insights into the Cyberattack

On July 22, South Korea’s national security adviser, Wi Sung-lac, spoke to reporters at the presidential office, shedding light on the Foreign Ministry hack that remains under investigation. The cyberattack, which occurred on a training system operated by the Korea National Diplomatic Academy, exposed sensitive information to unauthorized access for approximately 10 months.

According to Wi, the government delayed publicly disclosing the incident because officials first needed to address information that posed urgent national security concerns. The government consulted with relevant departments and agencies, taking several months to address the security measures before making a public announcement.

The Investigation and Security Concerns

The government has not yet determined the identity of the hacking group and is continuing to investigate. Wi stated that authorities could make certain assessments but were keeping several possibilities open.

Wi noted that diplomatic and security organizations are frequent targets of cyberattacks because of the sensitive information they handle. He explained that attackers generally have a purpose when selecting a target, and diplomatic institutions are often attacked.

The Foreign Ministry’s online education system was reportedly exposed to unauthorized access for about 10 months. The breach raised concerns that personal information belonging to thousands of current and former Foreign Ministry officials, as well as government officials stationed at overseas diplomatic missions, may have been compromised.

The attacker reportedly penetrated the academy’s online education server around April or May 2025 and accessed it repeatedly until early February. The Foreign Ministry said it learned of suspicious access in February after being notified by another government agency. It then blocked access to the system and began an investigation.

Strengthening Cybersecurity Systems

Wi pledged to strengthen the government’s cybersecurity systems to prevent a recurrence. The government will use this incident as a lesson, review its security systems, and make every effort to ensure that it does not happen again.

The government will also develop clearer cybersecurity guidelines and strengthen its response procedures. Wi stated that the government will prioritize strengthening its cybersecurity systems to prevent similar incidents in the future.

Government Response and Future Plans

The government’s response to the incident is a crucial step in strengthening its cybersecurity systems. Wi emphasized the importance of transparency and cooperation in addressing cyber threats.

The government’s commitment to developing clearer cybersecurity guidelines and strengthening its response procedures is a positive step towards enhancing its cybersecurity posture.

The incident serves as a reminder of the importance of robust cybersecurity measures in protecting sensitive information and preventing cyberattacks.

The government’s efforts to strengthen its cybersecurity systems will be closely watched by the international community, and its success will have far-reaching implications for global cybersecurity.