South Korea discloses data breach affecting 6,000 diplomats
This digest was compiled by AI from multiple sources — links to the originals are below.
South Korea disclosed that hackers breached the National Diplomatic Academy's online education system for ten months, stealing personal information of current and former Ministry of Foreign Affairs employees, including overseas diplomats. The incident impacts at least 6,000 individuals, 350 of whom are current government attachés abroad. The ministry delayed disclosure due to the sensitive nature of the breach.
The Breach
An unknown threat actor exploited a vulnerability in the Academy's server in April 2025, gaining access that lasted until February 2026. The compromised server was located inside the Ministry of Foreign Affairs headquarters and was excluded from regular security scrutiny, according to Korean media. The breach was discovered in February 2026 by the National Intelligence Service, which alerted the MFA.
Data Exposed
Leaked information includes IDs, names, email addresses, and encrypted passwords of individuals enrolled in the education system. The MFA stated that no unique identification numbers, sensitive information, mobile phone numbers, photographs, or home addresses were exposed. Korean media reported that official job titles and departmental affiliations were also leaked, with the number of affected individuals possibly reaching 10,000.
Response and Delays
The ministry has blocked access to the online education system and implemented additional security measures. During a press briefing, an MFA spokesperson said the disclosure was delayed due to the need to thoroughly analyze and review the matter. Affected individuals are advised to watch for suspicious communications and report them to the ministry's security department.
What's Next
The MFA is expected to provide further updates on the investigation and additional protective measures. It remains unclear whether the stolen data has been misused or if the attackers have been identified.
1 source
South Korea discloses data breach affecting 6,000 diplomats
