Now Hacked
EN-GB
Data breach

Korean Courts' Network Hacked, Personal Data of 17,998 People Leaked

First reported · Last reported · 30 related reports

The courts' computer network was attacked from 2022 to early 2023, and 1,014 GB of data from the electronic litigation server was leaked externally. Personal data of 17,998 people was identified in the 4.7 GB that was restored, and the attacker was presumed to be North Korea's Lazarus. The National Court Administration said it would notify victims and replace the system entirely, and the Personal Information Protection Commission imposed a fine of 207 million won for inadequate security measures.

Key facts

Affected organisation
Judiciary of Korea
Incident type
Data breach
Occurred / detected
Not confirmed
Scale of damage
1,014 GB of data leaked; personal data of 17,998 people identified in the restored material
Cause / method
Intrusion into the network by a group presumed to be North Korea's Lazarus, and inadequate security measures including open ports linking internal and external networks, retained default passwords and unencrypted resident registration numbers
Location
South Korea

If your data was exposed

View Judiciary of Korea notice ↗

Exposed dataNational ID number

  1. Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
  2. If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗

Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.

Timeline

  1. The malware infection of the judiciary's network and of the Seoul Central District Court's server was disclosed.
  2. The courts apologised for the hacking, presumed to be the work of North Korea, and the personal data leak.
  3. The National Court Administration began notifying individually 4,830 victims identified from 5,171 personal rehabilitation documents.
  4. The Personal Information Protection Commission imposed a fine of 207 million won on the National Court Administration over the leak of personal data of 17,998 people and inadequate security measures.
  5. It was disclosed that no one had received formal disciplinary action in the Supreme Court's internal audit.

30 related reports

The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.