South Korean diplomats' data compromised in 10-month hack

South Korea's Ministry of Foreign Affairs is facing severe criticism after a massive data breach compromised the personal information of nearly all its diplomats. The National Diplomatic Academy's online education system was hacked over a 10-month period, from April 2023 to February 2024, resulting in the potential leak of up to 10,000 individuals' data.

The compromised information includes the names, IDs, and email addresses of foreign service officials, government attachés posted abroad, and administrative staff at both the ministry's headquarters and its overseas missions. While sensitive personal identification details were reportedly not included, the sheer volume of exposed data, particularly concerning individuals serving internationally, has raised alarms about national security.

Adding to the concern is the ministry's delayed response; officials were reportedly unaware of the breach for the entire 10-month duration until alerted by the National Intelligence Service. Intelligence agencies are investigating the possibility that North Korea-linked hacking groups were responsible, noting similarities to their known tactics of infiltrating systems through third-party vendors. The incident highlights significant vulnerabilities in South Korea's cybersecurity infrastructure, particularly for its diplomatic corps.