Election commission employee's work PC hacked, data leaked
It belatedly came to light in April 2024 that the work PC of a National Election Commission employee had been hacked and data leaked. Concerns were raised about the risk of login credentials being leaked through an infostealer infection and the need to check whether the internal work network had been breached. A dereliction-of-duty complaint over the response to the hacking notification was later dropped without referral to prosecutors.
Key facts
- Affected organisation
- Election Commission
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Data on an employee's work PC
- Cause / method
- Hacking of an employee's work PC
- Location
- South Korea
Timeline
- The hacking of a National Election Commission employee's work PC and the resulting data leak came to light.
- Concerns were raised about the risk of leaked login credentials and the need to check whether the work network had been breached.
- It emerged that a dereliction-of-duty complaint against the election commission over its response to the hacking notification had not been referred to prosecutors.
3 related reports
Other incidents at Election Commission
NEC leaks resident registration numbers while disclosing accounting records
Impact: Personal information including resident registration numbers
The National Election Commission (NEC) leaked personal information while disclosing accounting records of the Rebuilding Korea Party. The leaked information included resident registration numbers, and the scale of the damage and the response have not been confirmed.
Read on 아시아투데이 ↗Data of about 3,000 National Election Commission employees leaked to external site
3kImpact: Names, department names, IP addresses and PC security inspection scorecards of about 3,000 employees
During an internal security inspection at South Korea's National Election Commission, a contract worker posted the inspection results to VirusTotal, leaking the data of about 3,000 employees. The leaked data included names, department names, IP addresses and PC security inspection scorecards. The Personal Information Protection Commission (PIPC) received a report on 26 June 2024 and began verifying the facts.
Read on 쿠키뉴스 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.