[CLSTR]
< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

4 clusters · 18 sources · 7 days · First seen · Last updated

South Korea government cyber threats intensify

Overview

South Korea’s diplomatic and defence ministries have faced a wave of cyber incidents over the past two years. A zero‑day exploit allowed attackers to infiltrate the Korea National Diplomatic Academy’s online education platform between April and May 2025; the breach—discovered in February 2026—exposed personal data of 6,000‑10,000 diplomats and senior officials. The ministry shut the platform down and, in July 2026, launched a joint investigation with the military cyber‑incident response team and began a broader security review.

A separate intrusion was reported on 23 July 2026, when an open port on the military’s PACS system (used for mobile medical imaging) gave unauthorized access to about 8 GB of radiology images linked to 1.15 million service members. The service was halted on 14 April 2026 and disciplinary action was taken against three medical officers.

The threat landscape escalated further in the first half of 2026. Cyber‑attack attempts targeting the Ministry of Foreign Affairs and its affiliates reached 96,483, surpassing the total for the entire previous year. Attempts focused on server‑information leaks, data collection and website hacking, while network‑intrusion attempts spiked 334‑fold since 2022. Vietnamese IP relays overtook the United States as the top relay destination. Similar surges were recorded against the Ministry of Unification. Lawmaker Kim Jun‑hwan called for immediate, comprehensive strengthening of diplomatic and security cyber defences.

Entities

Korea Foundation for International Cultural Exchange · Ministry of Unification of the Republic of Korea · Korea International Cooperation Agency · Kim Jun-hwan · Ministry of Foreign Affairs of the Republic of Korea

Timeline

  1. 16 days ago

    [TECHNOLOGY] 2 sources
    South Korea's Foreign Ministry Faces Near 100,000 Cyberattack Attempts in First Half of Year

    South Korea’s foreign ministry and related agencies saw 96,483 cyber‑attack attempts in H1, outpacing last year’s total; attacks focused on server data leaks and grew sharply, prompting calls for stronger cyber

  2. 19 days ago

    [TECHNOLOGY] 4 sources
    South Korea's Military Medical Imaging System Breach Exposes Data of 1.15 Million Personnel

    South Korea’s military medical imaging system was accessed, compromising data of 1.15 million personnel; a separate hack exposed thousands of diplomatic email records, prompting investigations and system shut‑d

  3. 21 days ago

    [TECHNOLOGY] 4 sources
    South Korea Diplomatic Academy Cyberattack Exposes Data of Thousands of Diplomats

    A zero‑day hack of South Korea's Diplomatic Academy exposed personal data of about 6,000 diplomats; authorities suspect possible North Korean involvement but have not confirmed the attacker.

  4. 23 days ago

    [POLITICS] 10 sources
    South Korea diplomatic academy hack breaches up to 10,000 officials' data

    A ten‑month hack of South Korea's diplomatic academy platform exposed up to 10,000 officials' personal data; attackers used a zero‑day flaw, attribution remains uncertain, and authorities are tightening cyber‑s

Sources

biz.heraldcorp.com · blogspan.net · borncity.com · elbalad.news · english.hani.co.kr · europesays.com · hani.co.kr · insurancejournal.com · m.hani.co.kr · map.simonsarris.com · news.donga.com · news.heraldcorp.com · rappler.com · rbfirehose.com · seoul.co.kr · sputniknews.cn · stv.seoul.co.kr · wkzo.com