Yoido Full Gospel Church reports suspected data breach of 850,000 members

Yoido Full Gospel Church, South Korea’s largest church, has reported a suspected data breach affecting approximately 850,000 members. Following a notification from the Korea Internet & Security Agency (KISA) regarding a system intrusion, the church conducted an emergency security audit.

The investigation revealed that one of seven suspected leaked data files contained personal information related to member history changes. This includes the names and birthdates of 850,000 members, as well as records of changes to 2,629 resident registration numbers, 3,964 phone numbers, and 7,202 addresses. Other files, such as those containing baptismal or appointment records, did not contain personal identifiers.

Senior Pastor Lee Young-hoon issued an apology, stating the church takes responsibility for the failure to protect member data and will cooperate with authorities to strengthen security systems. In response to the attack, the church has blocked external access, changed server passwords, and is working with security specialists to analyze vulnerabilities.

Cybersecurity firm Oasis Security noted that the breach appears to involve overseas attackers and identified two major South Korean churches as targets, including Sarang Church in Seoul.