Government24 source code error leaks personal data of 1,233 people
In early April 2024, a source code error related to civil documents and tax payment certificates on Government24 leaked the personal data of 1,233 people. An investigation by the Personal Information Protection Commission (PIPC) found missing tests and unaddressed vulnerabilities, amongst other issues. The PIPC imposed penalties including a fine of 273 million won on the Ministry of the Interior and Safety.
Key facts
- Affected organisation
- Ministry of the Interior and Safety
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal data of 1,233 people
- Cause / method
- Source code error related to civil documents and tax payment certificates, and missing tests
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.
Timeline
- It came to light that personal data had been leaked due to a document issuance error on Government24 in early April.
- The Personal Information Protection Commission (PIPC) launched an investigation into the Government24 personal data leak.
- The PIPC investigation confirmed the leak of 1,233 people's personal data due to a source code error and missing tests, amongst other issues, and penalties including a fine of 273 million won were imposed on the Ministry of the Interior and Safety.
40 related reports
- 정부24서 개인정보 유출…행안부는 규모·원인 등 '쉬쉬'
- 정부24, 또 다시 ‘말썽’... 지난 4월초, 발급 오류로 민감한 개인정보 유출
- 정부 전산망, 이번엔 개인정보 유출…‘정부24’서 1200건 문서 오발급
- ‘정부24’ 개인정보 1,200여 건 유출…개보위, 조사 착수
- 정부24서 개인정보 유출…잇따르는 행정전산망 사고
- ‘정부24’에서 개인정보 1천여 건 유출…행안부 “개발자 실수”
- 정부24서 개인정보 유출… 행안부 “프로그램 개발상 실수” 해명
- ‘정부24’에서 개인정보 1천여 건 유출
- 정부24에서 개인정보 1천여 건 유출…엉뚱한 서류 발급
- 정부24에서 민원서류 발급 오류…개인정보 1천여건 유출
- '정부24'에서 다른사람 서류 발급…개인정보 1233건 유출(종합)
- ‘정부24’에서 다른 사람 서류가?…개인정보 1233건 유출
- 정부24 또 오류… 개인정보 1233건 유출
- [사설] ‘정부24’ 개인정보 대거 유출, ‘전자정부’가 위험하다
- ‘정부24’ 서류 뗐더니 남 개인정보…1200건 유출에 “개발자 실수”
- '정부24' 개인정보 1천 2백여 건 유출
- 이번엔 정부24 개인정보 유출…계속되는 행정망 오류
- 문제투성이 '정부24' 또 오류 … 개인정보 1000건 이상 유출
- 행정안전부,‘정부24’개인정보 유출된 지 닷새 돼서야 민원인 신고로 인지
- 개인정보위, '정부24 개인정보 유출' 행안부에 2.7억원 과징금 부과
- 생기부 유출 행안부·개인정보 털린 농진청…5개 기관 과징금 5.4억
- '정부24 개인정보 유출' 행안부, 과징금 2.7억 부과받아
- 정부24 개인정보 유출 ‘2.7억 과징금’...행안부 책임 인정
- '정부24' 소스코드 오류로 1200명 개인정보 유출한 행안부에 2.7억 과징금
- 정부24 포털에서 개인정보 유출... 행안부 과징금 2억7300만원
- 개인정보위, 정부24·농진청 위탁시스템서 개인정보 유출…과징금 5억4,660만원 부과
- 개인정보위, 정부24서 개인정보 유출 행안부에 과징금 2.7억원
- 국민 비서 '정부24'의 배신…개인정보 유출 5억대 과징금
- 정부24서 생기부·납세증명서 유출 행안부에 과징금 2.7억원
- “정부24 개인정보 유출”…개인정보위, 행안부에 과징금 2억7천만원
- “정부24에서 생기부 등 유출”…행안부에 과징금 2억 7천만 원
- 정부24서 개인정보 1233건 유출…행안부, 시스템 오류로 과징금 2.7억 제재
- '관리 소홀' 정부24 개인정보 유출…행안부 2억원대 과징금
- '정부24' 개인정보 유출…개보위, 행안부에 과징금 2.7억
- ‘정부24 개인정보 유출’ 행안부에 과징금 2억7300만원
- 정부24 오류·취약점으로 정보 유출…행안부에 2억원대 과징금
- 개인정보유출 행안부·농촌진흥청·농업과학원·축산과학원·미소테크 '철퇴'
- '정부24·농진청 유출' 후폭풍…개인정보위, 공공 수탁업체에도 과징금 철퇴
- 정부24서 생기부·졸업증명서 유출…개보위, 행안부에 과징금 2.7억원 - 머니투데이
- 생기부·납세증명서까지 유출…정부24에서 1233명 정보 샜다
Other incidents at Ministry of the Interior and Safety
Resident registration numbers and medical certificates exposed in public bodies’ disclosure portal documents
35Impact: Personal and sensitive information exposed in attachments to 35 documents from at least 22 public bodies
Personal and sensitive information, including resident registration numbers, passport numbers and cancer diagnosis certificates relating to public officials and private individuals, was exposed in attachments to 35 documents from at least 22 public bodies published on the Information Disclosure Portal. The causes were identified as omissions in the non-disclosure and masking settings applied by the bodies that produced the documents, alongside limitations in filtering unstructured files. The Ministry of the Interior and Safety suspended downloads of original documents on 5 November and began a comprehensive inspection of public bodies, with an investigation into the extent of the exposure still under way on 9 November.
Related reports: 12 · last report →Government24 hack exposes memory dump files from 11 servers
Impact: Memory dump files stolen from 11 servers; an estimated 36 resident registration numbers, three telephone numbers and 55 IDs and passwords exposed
A cyber-attack targeting a vulnerable page on Government24’s children’s portal on 17 August led to the theft of memory dump files from 11 servers. The Ministry of the Interior and Safety estimated that 36 resident registration numbers, three telephone numbers and 55 IDs and passwords may have been exposed, but could not identify the victims or the precise extent of the leak because the attacker erased traces of the intrusion. The incident notice was hidden after 30 days and deleted following media coverage.
Related reports: 5 · last report →Cyber-attack blocks Interior Ministry relay server, disrupting property app
Impact: Service outage at a property transaction price app
A cyber-attack caused a relay server of the Ministry of the Interior and Safety to be temporarily blocked. As a result, a property transaction price app suffered a service outage.
Read on Chosunbiz ↗Government systems including Interior Ministry's Onnara system hacked
Suspicions were raised of hacking, believed to be the work of North Korea, targeting the Ministry of the Interior and Safety, the Ministry of Foreign Affairs and the Defense Counterintelligence Command. On 17 October 2025, the government confirmed traces of hacking in systems including the Onnara system.
Related reports: 12 · last report →Government24 user's change-of-address form exposed on Google search for over 3 days
1Impact: Address, mobile phone number and first part of the resident registration number of one Government24 user
The change-of-address form of one Government24 user was publicly accessible through Google search for at least three days. The user's address, mobile phone number and the first part of the resident registration number were exposed. The search results have been removed, and the exact cause of the exposure is being investigated.
Read on 뉴스1 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.