South Korea Says Diplomatic Academy Breach Exposed Data of at Least 6,000
Summary
South Korea says an unknown actor exploited a server vulnerability to access the National Diplomatic Academy’s system from April 2025 to February 2026, exposing personal data of at least 6,000 people. Media reports say the total may reach 10,000.
Key points
- The Ministry of Foreign Affairs said an unknown actor accessed the National Diplomatic Academy’s online education system for ten months after exploiting a server vulnerability.
- The exposed information reportedly included IDs, names, email addresses and encrypted passwords; the ministry said certain sensitive details, including phone numbers and home addresses, were not exposed.
- At least 6,000 people were affected, including 350 current overseas attachés; Korean media reports put the possible total as high as 10,000.
- The breach began in April 2025 and was discovered in February 2026 after the National Intelligence Service alerted the ministry.
- The ministry blocked access to the system, added security measures and advised potentially affected people to report suspicious communications.
Article Details
- Victim Organization
- National Diplomatic Academy
- Incident Type
- Unauthorized access to the Academy’s online education system through exploitation of a server vulnerability, followed by exposure of personal data.
- Data Types Exposed
- IDs
- Names
- Email addresses
- Encrypted passwords
- Official job titles and departmental affiliations (reported by Korean media)
- Affected Records
- At least 6,000 people; Korean media reported the total may be as high as 10,000. The affected people included 350 current government attachés posted abroad.
- Operational Impact
- The Ministry blocked access to the online education system and implemented additional security measures. Potentially affected individuals were advised to report suspicious communications.
- Claim Status
- confirmed