API
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 5 sources · 15 days · First seen · Last updated

Cybersecurity threats in South Korean infrastructure

Overview

South Korean critical infrastructure and service sectors are facing significant cybersecurity challenges. In the maritime sector, port authorities have recorded 1,168 cyberattacks since 2021, targeting major hubs such as Busan, Incheon, Ulsan, and Yeosu-Gwangyang. This trend persists despite a shortage of specialized investigators within the Korea Coast Guard, which currently maintains only eight dedicated cyber investigation personnel nationwide.

Simultaneously, the medical sector has seen a surge in cyber incidents, with 114 attacks recorded between February 2020 and May 2025. Ransomware is the primary threat, accounting for 89.5% of these cases, and disproportionately affecting smaller clinics and hospitals. These attacks have evolved from system lockouts to the theft of sensitive patient data and the deletion of medical databases. While security monitoring services exist, participation among private medical institutions remains low due to high setup costs.

Entities

Ministry of Health and Welfare · Korea Social Security Information Service · Korea Coast Guard · Jeon Jin-sook · Moon Geum-ju

Timeline

  1. [TECHNOLOGY] 2 sources
    South Korean medical institutions face surge in ransomware attacks

    South Korean medical institutions faced 114 cyberattacks over six years, mostly ransomware. Small clinics are primary targets, prompting calls for expanded government security support to protect patient safety.

  2. [TECHNOLOGY] 3 sources
    South Korean ports face rising cyberattacks amid shortage of specialized investigators

    South Korean ports have faced 1,168 cyberattacks since 2021, yet the Korea Coast Guard has only eight dedicated cyber investigators to manage the growing threat to maritime logistics.

Sources

bosa.co.kr · imaeil.com · jejumaeil.net · namdonews.com · womannews.net