Pukyong National University personal data leaked in hacking incident

Personal information belonging to 5,108 individuals, including 5,106 students and two staff members at Pukyong National University, was leaked following a cyberattack. The breach occurred through the ‘Campus e-Moa System’ managed by Suhyup Bank, which handles tuition payments.

Between December 17 and December 18, an unauthorized party exploited security vulnerabilities to create an unapproved administrator account and access the system. The university discovered the breach on December 20 after receiving monetary demands from the intruder.

Leaked student data includes names, student IDs, departments, tuition payment amounts, and virtual account numbers. Staff information includes names, departments, positions, extension numbers, mobile numbers, and email addresses. The university stated that sensitive information, such as resident registration numbers, does not appear to have been compromised.

Pukyong National University has blocked the unauthorized account and reported the incident to the Ministry of Education, the Personal Information Protection Commission, and the police. The university has urged the community to be vigilant against potential secondary crimes, such as voice phishing or smishing, and to verify any requests for money or personal data through official channels.