Judiciary of Korea security incident history
Hacking, data breaches and other security incidents involving Judiciary of Korea, with related coverage.
Online access to court rulings suspended after partial personal data leak
Impact: Partial leak of names, addresses and resident registration numbers in court rulings
Some personal data, including names, addresses and resident registration numbers, was leaked from court rulings. Online access to court rulings was suspended.
Read on 동아일보 ↗Daejeon District Court employee who leaked personal data to former judge faces heavy discipline
An employee of the Daejeon District Court leaked personal information to a former judge. The Daejeon District Court imposed heavy disciplinary action on the employee.
Read on OhmyNews ↗DDoS attack knocks South Korea's court websites offline for about 2 hours
Impact: Court websites and case search function across the country paralysed for about 2 hours; temporary access disruption to the electronic litigation site
On 7 November 2024, the websites of courts across South Korea and their case search function were paralysed for about two hours by a DDoS attack, and the electronic litigation site also suffered temporary access problems. The websites were restored and the attacks subsided the following day, but the National Court Administration maintained its defensive posture. The National Court Administration tracked the attackers together with the National Intelligence Service and the National Office of Investigation.
Related reports: 13 · last report →Korean Courts' Network Hacked, Personal Data of 17,998 People Leaked
18kImpact: 1,014 GB of data leaked; personal data of 17,998 people identified in the restored material
The courts' computer network was attacked from 2022 to early 2023, and 1,014 GB of data from the electronic litigation server was leaked externally. Personal data of 17,998 people was identified in the 4.7 GB that was restored, and the attacker was presumed to be North Korea's Lazarus. The National Court Administration said it would notify victims and replace the system entirely, and the Personal Information Protection Commission imposed a fine of 207 million won for inadequate security measures.
Related reports: 30 · last report →