IITP leaks personal data during security work
During security reinforcement work at the Institute of Information & Communications Technology Planning & Evaluation, a firewall misconfiguration opened an external port and personal information was leaked. Damage to users of five systems, including researcher information, was confirmed. Ryu Je-myung, Second Vice Minister of Science and ICT, apologised for the successive leaks and said measures to prevent recurrence would be sought.
Key facts
- Affected organisation
- Institute of Information & Communications Technology Planning & Evaluation (IITP)
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information of users of five systems
- Cause / method
- Intrusion through an external port left open by a firewall misconfiguration during security reinforcement work
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Centre ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Timeline
- The leak of personal information of users of five systems through an external intrusion caused by a firewall misconfiguration came to light.
- Ryu Je-myung, Second Vice Minister of Science and ICT, apologised for the successive personal data leaks and said measures to prevent recurrence would be sought.
5 related reports
Other incidents at Institute of Information & Communications Technology Planning & Evaluation (IITP)
IITP's Personal Data Access Log Management System Hacked
The personal data access log management system at the Institute of Information & Communications Technology Planning & Evaluation was hacked in July 2026. The incident came seven months after a previous hack, and work was carried out to determine whether researchers' personal data had been leaked.
Related reports: 4 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.