South Korea's diplomat training system breached by hackers for 9 months

Incident Overview

Unidentified hackers accessed the Korea National Diplomatic Academy's e-learning platform, compromising personal information of current and former employees of South Korea's Ministry of Foreign Affairs. The breach was confirmed by the ministry, which reported the intrusion occurred over a nine-month period.

Details of the Breach

According to the ministry, the hackers accessed sensitive data, including user IDs, names, email addresses, and encrypted passwords. However, more sensitive information, such as personal photos, was reportedly not affected. The breach was linked to a zero-day vulnerability in server software, coupled with misconfigurations in security settings.

Response and Consequences

In response to the breach, the Korea National Diplomatic Academy shut down the compromised system and has not restored it since. The ministry has initiated an investigation to determine the extent of the data accessed and exfiltrated during the compromise period.

Wider Implications

This incident comes amid escalating cyber threats in South Korea, with lawmakers and analysts expressing concern about national security and digital defenses. Historically, about 80% of attacks on South Korean public institutions have been attributed to North Korean hackers, creating ongoing vigilance regarding state-sponsored cyber threats.