A significant cyberattack targeting South Korea's Korea National Diplomatic Academy has raised alarms within the government. Authorities are currently investigating potential links to North Korean cyber activities.
Scale of the Breach Under Investigation
The data leak appears to be of considerable scale, but we have yet to fully ascertain the extent of the breach.
Park Il, Foreign Ministry Spokesperson
- Attackers exploited a zero-day vulnerability and security flaws in the academy's online education system.
- Access to the system was maintained from April 2025 until February 2026, when unusual activity prompted action.
The breach, which was uncovered in early 2026, has potentially compromised personal information of about 6,000 current and former diplomats, according to reports from South Korean media.
The Foreign Ministry spokesperson, Park Il, confirmed that although there is no evidence of data misuse, investigations are ongoing to determine the origin of the attack.
Intelligence agencies are closely examining whether North Korean-linked hacking groups were involved, a concern that echoes previous cyber incidents attributed to Pyongyang.
Security experts note that attacks on government institutions have increased in recent years, with North Korea often suspected of orchestrating such breaches to gather sensitive information.
In response to this incident, the ministry is collaborating with relevant cybersecurity agencies to strengthen defenses and prevent future breaches.