Monitor this situation.
Unsubscribe anytime.
[SITUATION] · [ACTIVE] · [INTERNATIONAL]
2 clusters · 24 sources · 1 days · First seen · Last updated
South Korean presidential delegation data leak
Overview
Sensitive personal information belonging to South Korean President Lee Jae Myung, the First Lady, and 166 members of a presidential delegation was exposed online. The data, which included names, affiliations, dates of birth, and passport details, originated from a file titled “Passenger List (Republic of Korea-Belgium)” that was uploaded to a paid security website in June 2026.
In response to the exposure, the Blue House held an emergency meeting to investigate the scope of the breach. The Ministry of Foreign Affairs began technical inspections of computers and email accounts used during the European trip, while authorities started reissuing passports for all affected individuals to mitigate security risks. Police launched a preliminary investigation, initially viewing the incident as a data exposure rather than a hacking event. Subsequent reports indicated that authorities are investigating whether the leak resulted from an external source or malware infection.
Newer findings suggest the leak may have occurred when the file was uploaded to VirusTotal, a paid malware analysis platform, likely during a security check prior to the President’s official trip to Europe. Authorities now believe the incident may have resulted from an internal error, specifically that an employee may have uploaded the file for a malware check without realizing the platform shares data with external security partners and paid subscribers. The investigation, led by Chief of Staff Lim Kwang-hyun, aims to assign responsibility for the exposure, which affected 168 individuals including cabinet members, security details, and journalists.
Entities
Lim Kwang-hyun · VirusTotal · Belgium · Cheong Wa Dae · Lee
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 22 SOURCES] The leaked data included passport numbers, dates of birth, and passport validity information. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de · +17 more
- [● 22 SOURCES] The data was contained in an Excel file titled “Passenger List (Republic of Korea-Belgium)” on a paid security platform. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de · +17 more
- [● 22 SOURCES] Personal information of 168 members of the presidential delegation was exposed online. www.imaeil.com · www.sportalkorea.com · www.seoul.co.kr · www.koreatimes.co.kr · www.koreaherald.com · +17 more
- [● 22 SOURCES] The leak is suspected to have occurred during a malware check of the passenger list in June. www.imaeil.com · www.sportalkorea.com · www.koreatimes.co.kr · www.koreaherald.com · www.jawapos.com · +17 more
- [● 21 SOURCES] Police have launched an investigation into the circumstances of the data leak. www.imaeil.com · www.sportalkorea.com · www.sisajournal.com · www.koreatimes.co.kr · www.koreaherald.com · +16 more
- [● 20 SOURCES] President Lee Jae Myung’s personal information was accessible on the internet for several months. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de · +15 more
- [● 19 SOURCES] The Blue House held an emergency meeting led by Presidential Chief of Staff Lim Kwang-hyun. www.imaeil.com · www.sportalkorea.com · biz.heraldcorp.com · www.socialnews.xyz · www.sisajournal.com · +14 more
- [● 18 SOURCES] The President’s office announced an investigation and immediate countermeasures. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de · +13 more
- [● 5 SOURCES] The file was likely the passenger list for the presidential aircraft during Lee’s European trip in June. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de
- [● 5 SOURCES] The data was uploaded one week before the start of the trip and could be downloaded by paying users. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de
- [● 5 SOURCES] The leak affected the President’s wife, security advisors, office staff, bodyguards, personal physician, and journalists. www.fehmarn24.de · www.marler-zeitung.de · www.onetz.de · www.op-online.de · www.recklinghaeuser-zeitung.de
- [● 3 SOURCES] The information was exposed on a paid security-related website for approximately five months. www.imaeil.com · www.sportalkorea.com · www.seoul.co.kr
Timeline
-
[POLITICS] 3 sourcesSouth Korean President Lee orders review of youth SNS restrictions
President Lee has ordered a review of social media restrictions for minors and addressed a major data breach involving the personal information of the presidential delegation.
-
[INTERNATIONAL] 23 sourcesSouth Korea President Lee Jae Myung affected by major data leak
Personal data of South Korean President Lee Jae Myung and 167 others, including passport numbers, was exposed for five months on a cybersecurity platform due to a suspected internal error.
Sources
anninhthudo.vn · biz.heraldcorp.com · cnbcindonesia.com · english.hani.co.kr · fehmarn24.de · global.liputan6.com · gyominilbo.com · imaeil.com · jawapos.com · jurnas.com · koreaherald.com · kyeonggi.com · liberatorio.altervista.org · m.koreatimes.co.kr · m.sportalkorea.com · marler-zeitung.de · onetz.de · op-online.de · recklinghaeuser-zeitung.de · seoul.co.kr · sisajournal.com · socialnews.xyz · stimberg-zeitung.de · thanhnien.vn
This summary has been updated 2 times: see revision history