South Korea probes major cyberattack on diplomatic academy, eyes North Korea link
Translated from English, summarized and contextualized by DistantNews.
At a glance
- South Korea's Foreign Ministry is investigating a significant cyberattack on a government diplomatic academy.
- Authorities suspect foreign state-backed hackers may be involved, with data leaks occurring between April 2025 and February 2026.
- Personal information of diplomats and officials may have been compromised, and North Korea is being considered as a potential perpetrator.
South Korea's Foreign Ministry is probing a "significant" cyberattack that exposed a "considerable scale" of data from a government-run diplomatic academy. Authorities are examining the possibility of involvement by foreign state-backed hacking groups.
The academy's online education system was compromised between April 2025 and February 2026, exploiting a "zero-day" software vulnerability. The system stored training videos and participant data, including names and user IDs. While the full extent of the breach and specific information affected remain unclear, a South Korean daily reported that personal data of about 6,000 current and former diplomats might have been compromised.
findings so far suggested a data leak of "considerable scale"
Officials have not confirmed any misuse of leaked data and stated there is insufficient technical evidence to pinpoint the attackers. However, the government is not ruling out any possibilities, including North Korean-linked hacking groups. The ministry is collaborating with relevant agencies to assess the breach's scope and enhance cybersecurity measures.
no misuse of leaked data had been confirmed and there was insufficient technical evidence to determine who was behind the attack
Originally published by CNA in English. Translated, summarized, and contextualized by our editorial team with added local perspective. Read our editorial standards.