Signs of government On-Nara system access and certificate log leak
Signs emerged that the On-Nara system had been accessed using government employees' accounts and that around 2,800 GPKI certificate verification logs belonging to government and bank staff had been leaked. Allegations were also raised that hacking targeting the Korean government began in January 2025 at the latest and was linked to the Chinese hacking group SLIME68. The government's fact-checking was under way, and whether the intrusion succeeded and the full extent of the damage had not been determined.
Key facts
- Affected organisation
- Being confirmed
- Incident type
- Hacking & intrusion
- Occurred / detected
- Not confirmed
- Scale of damage
- Signs of a leak of around 2,800 GPKI certificate verification logs
- Cause / method
- Signs of On-Nara system access using accounts of Ministry of Unification and Ministry of Oceans and Fisheries staff
- Location
- South Korea
Timeline
- Allegations were raised that hacking targeting the Korean government began in January 2025 at the latest and was linked to SLIME68.
- Signs of On-Nara system access and a leak of around 2,800 GPKI certificate verification logs came to light, and the government's fact-checking was under way.
4 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.