KIPA’s IDEARO platform hacked, exposing 62 MB of data
On 6 November 2026, attackers exploited a vulnerability in the file upload feature of IDEARO, a platform operated by the Korea Invention Promotion Association (KIPA), to gain access and install and run malware. KIPA detected and blocked the intrusion on 11 November and confirmed that 62 MB of data had been transferred outside the organisation from some servers. The attackers could also access attachment storage, but it has not been confirmed whether any attachments were actually viewed or exfiltrated. No signs of intrusion were found on the separate server holding encrypted member information.
Key facts
- Affected organisation
- Korea Invention Promotion Association (KIPA)
- Incident type
- Data breach
- Occurred / detected
- 2026-11-06
- Scale of damage
- Approximately 62 MB of data exfiltrated
- Cause / method
- Server intrusion and malware installation and execution by exploiting a security vulnerability in the file upload feature
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organisation’s official domain before using it.
Timeline
- The hack of the IDEARO platform and the transfer of approximately 62 MB of data outside the organisation were disclosed.
1 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.