Personal data of 17,088 members of Democratic Party's Blue Wave community leaked
Names, usernames, encrypted passwords, email addresses and other data of 17,088 members of the Democratic Party of Korea's party member community Blue Wave were leaked through hacking. The leak is believed to have occurred in September 2025, and the party became aware of the incident on 6 August 2026 through an outside tip. Party officials expressed apologies and willingness to cooperate with the investigation, and the service was temporarily shut down on 11 August for a security check.
Key facts
- Affected organisation
- Democratic Party of Korea
- Incident type
- Data breach
- Occurred / detected
- 2026-08-06
- Scale of damage
- Personal information of 17,088 Blue Wave members
- Cause / method
- Hacking of the party member community Blue Wave
- Location
- South Korea
If your data was exposed
Exposed dataNameEmailUsernamePassword
- Change your password, and also change it on any other site where you use the same one. Turn on two-factor authentication if available.
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The Democratic Party of Korea became aware of the Blue Wave personal data leak through an outside tip.
- The leak of members' personal data was made public, and the party said it was unrelated to the national convention voting system.
- Former Secretary-General Cho Seung-lae apologised for the personal data leak and said he would cooperate in efforts to overhaul security.
- Han Byung-do apologised for the personal data leak and said he would cooperate with the external investigation.
- The Blue Wave service was temporarily shut down for a security check.
28 related reports
- 전대 앞둔 민주 당원 1.7만명 개인정보 유출…해킹 피해 11개월 동안 몰랐다
- 與 당원 커뮤니티서 개인정보 해킹 사고‥"전대 투표와는 무관"
- 與 당원 커뮤니티서 개인정보 해킹…"전대 투표시스템과는 무관"
- 민주당 당원 커뮤니티 1만7000명 개인정보 해킹…1년 가까이 몰랐다
- 與 당원 커뮤니티서 회원 개인정보 무더기 해킹
- 與 당원 커뮤니티서 1만7088명 개인정보 해킹… 작년 9월 유출 추정
- 민주당 당원 커뮤니티 ‘블루웨이브’, 회원 1만 7천여 명 개인정보 유출
- 민주당 당원 커뮤니티서 해킹…1만7000여명 개인정보 유출
- 민주당 커뮤니티 '블루웨이브' 해킹...1만7천여 명 개인정보 유출
- 민주당 당원 커뮤니티 ’블루웨이브’ 개인정보 무더기 해킹
- 민주당 당원 커뮤니티서 개인정보 무더기 해킹···"전당대회 온라인 투표와는 무관"
- 민주당 당원 커뮤니티 해킹…1만7000명 개인정보 털리고 11개월간 몰랐다
- 민주당 당원 1만7088명 해킹 피해…김민석·김용 “정청래 등 前 지도부 책임”
- 조승래, 당원 1.7만명 개인정보 해킹 사고에 “무거운 책임 통감”
- 민주당 당원 커뮤니티 해킹…회원 1만7천여명 개인정보 유출
- 민주당, 개인정보 유출 늑장 대응 논란에⋯“당시 점검서 이상 없었다”
- 민주당 당원커뮤니티 해킹…1만7088명 개인정보 유출
- 김민석 "당원 1.7만명 정보 유출 1년…관리 무능 바로잡아야"
- 김민석 "당원 개인정보 유출 사태, 관리 무능 바로잡아야"
- 조승래, '블루웨이브' 개인정보 유출 사과 "무거운 책임 통감"
- 조승래, '민주당원 1.7만 명 개인정보 유출'에 사과… "무거운 책임 통감"
- 조승래 전 민주당 사무총장, 당원 정보 유출에 "책임 통감‥보안 쇄신 협조"
- 與당원 1.7만명 정보 유출…김민석 “관리 무능” 조승래 “책임 통감”
- 조승래 “민주당 당원정보 유출, 당시 사무총장으로서 책임 통감”
- 민주당 당원 정보 유출에 전 사무총장 사과 "책임 통감… 조사 협조하겠다"
- 한병도, 민주당원 개인정보 유출에 “사과…외부 수사에 협조"
- 민주, '개인정보 유출' 당원 커뮤니티 임시 폐쇄..."보안 점검"
- 민주당원 1만7000명 정보 유출 논란 … 與 커뮤니티 블루웨이브 결국 폐쇄
Other incidents at Democratic Party of Korea
Claims of membership list leak at Democratic Party's North Chungcheong branch
Allegations of a party membership list leak have resurfaced within the Democratic Party of Korea's North Chungcheong Province branch. Whether a leak actually took place, its extent, timing and the response have not been confirmed.
Read on 한겨레 ↗Signs of leak and sale of Democratic Party's Yeosu B dues-paying member roster
Impact: Roster of Yeosu B dues-paying members
Signs have emerged that the roster of dues-paying members of the Democratic Party of Korea's Yeosu B constituency was leaked and traded. The indications have sparked controversy.
Read on 뉴스탑전남 ↗Democratic Party of Korea website hit by suspected DDoS during all-member vote
Impact: Three website access outages
On 13 April 2025, during an all-member vote on the Democratic Party of Korea's primary rules, traffic to the party's website surged and access was disrupted three times. Suspecting a DDoS attack, the party decided to report the security incident to the Korea Internet & Security Agency (KISA) and request an investigation. Online voting, which was conducted on a separate server, suffered no further damage.
Read on 뉴시스 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.