● Covered by 2 sources · 2 reportsMedium impact1 negative
South Korea's diplomat training system breached by hackers for 9 months
Key points
- Diplomat training system breached from April 2025 to February 2026.
- Personal data of 6,000+ MFA employees, including diplomats, stolen.
- Compromised data includes IDs, names, emails, and encrypted passwords.
- Breach exploited a zero-day vulnerability and misconfigured security.
- System was shut down and has not been restored since the discovery.
Incident Overview
Unidentified hackers accessed the Korea National Diplomatic Academy's e-learning platform, compromising personal information of current and former employees of South Korea's Ministry of Foreign Affairs. The breach was confirmed by the ministry, which reported the intrusion occurred over a nine-month period.
Details of the Breach
According to the ministry, the hackers accessed sensitive data, including user IDs, names, email addresses, and encrypted passwords. However, more sensitive information, such as personal photos, was reportedly not affected. The breach was linked to a zero-day vulnerability in server software, coupled with misconfigurations in security settings.
Response and Consequences
In response to the breach, the Korea National Diplomatic Academy shut down the compromised system and has not restored it since. The ministry has initiated an investigation to determine the extent of the data accessed and exfiltrated during the compromise period.
Wider Implications
This incident comes amid escalating cyber threats in South Korea, with lawmakers and analysts expressing concern about national security and digital defenses. Historically, about 80% of attacks on South Korean public institutions have been attributed to North Korean hackers, creating ongoing vigilance regarding state-sponsored cyber threats.
✨ This summary was generated by AI from the outlets' reporting listed below. It is not independently verified and may contain errors — check the original sources. How BrevFeed works →
The daily brief
One email each morning: the day's tech stories, clustered across outlets and summarized. No account needed.
One email a day. Unsubscribe in one click, any time.
Today's brief
Spend a few minutes, get the whole day. Every topic's top stories in one hands-free rundown — listen, watch, or read the transcript.
▶ Play today's brief
New every morning, and the back catalogue is archived by date.
How outlets covered it
South Korea's National Diplomatic Academy experienced a data breach lasting ten months, exposing personal information of at least 6,000 current and former Ministry of Foreign Affairs employees, including diplomats. The incident highlights vulnerabilities in government online systems and the potential for long-term undetected access by threat actors.
Hackers compromised South Korea's diplomatic academy's e-learning platform for nine months, exposing employee data. This breach raises serious cybersecurity concerns, especially given the country's past experiences with North Korean cyberattacks.