Jeonbuk National University integrated information system hacked, personal data leaked
On July 28, 2024, Jeonbuk National University's integrated information system OASIS was hacked, leaking the names, resident registration numbers, contact details and academic records of students, graduates and lifelong education center members, among others. The university detected the attack on July 29, blocked the access path and patched the vulnerability, and later strengthened two-factor authentication. The investigation found vulnerabilities such as in the password recovery function and poor monitoring at night and on weekends, and the university was fined about 620 million won.
Key facts
- Affected organization
- Jeonbuk National University
- Incident type
- Data breach
- Occurred / detected
- 2024-07-28
- Scale of damage
- 322,130 personal data records
- Cause / method
- External hacking exploiting system vulnerabilities such as in the password recovery function, and poor monitoring at night and on weekends
- Location
- South Korea
If your data was exposed
Exposed dataNamePhone numberNational ID number
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- The integrated information system OASIS was hacked and personal information was leaked.
- The university detected the attack, blocked the access path and patched the vulnerability.
- The university apologized for the leak of personal information of 322,425 people and set up a channel for reporting damage.
- The university strengthened two-factor authentication and said no secondary damage had been confirmed at that point.
- The investigation confirmed system vulnerabilities and poor monitoring, and Jeonbuk National University was fined about 620 million won.
- Based on data submitted to the Personal Information Protection Commission (PIPC), the scale of the leak was tallied at 322,130 records.
26 related reports
- 전북대 32만명 개인정보 털렸다…피해접수 창구 운영
- [전북대 오아시스 해킹]전북대 개인정보 유출 여부 조회 사이트 안내
- 전북대, 32만 명 개인정보 유출…"외부 해킹"
- “부모님 집 주소까지 털려...” 전북대 시스템 해킹에 학생들 불안 ‘증폭’
- 전북대 학생 등 32만명 개인정보 유출…대학 측 "머리 숙여 사과"
- '32만명 개인정보 유출'에 전북대 학생들 "불안하고 스트레스"
- 전북대 통합정보시스템 해킹…32만여 명 개인정보 유출
- 32만명 정보 유출에 민원신고 빗발…전북대 “금전적 피해는 아직 없어”
- 32만명 개인정보 유출…전북대 "현재 금전적 피해 신고 없어"
- 전북대 학생 개인정보 '탈탈' 털렸다…"32만명 정보 해킹돼"
- 전북대 "해킹 공격받아 32만여 명 개인정보 유출"
- 전북대, 통합정보시스템 ‘오아시스’ 해킹... 학생, 졸업생 등 32만여명 개인정보 유출
- 전북대 '오아시스' 해킹 "2차 금전사고 아직 없어"…"비번은 유출 안돼"
- 전북대학교 재학생·졸업생 '개인정보 유출'에 지역 언론들 비판 이어져
- 김민전 "32만명 개인정보 유출 전북대, 관련 예산 89% 감소"
- 전북대 4년연속 청렴도 최하위…32만명 정보유출 해킹 쟁점
- 개인정보위, 안전조치 위반 머크·온플랫·디알플러스에 과징금 1억 1242만 원 부과
- 개인정보위, 머크·디알플러스 등 안전조치 위반 3개 사업자와 개인정보 유출 전북대·이화여대에 과징금 부과
- ‘해커 표적’ 되는 대학들…전북대·이화여대 행정 시스템 개인정보 어떻게 털렸나
- '32만 명 개인정보 유출' 전북대에 과징금·과태료
- 개인정보 유출 전북대 6.2억, 이대 3.3억 과징금
- 개인정보위, ‘개인정보 유출’ 전북대·이화여대에 과징금 철퇴
- 40만명 개인정보 유출한 전북대·이화여대···과징금 9억6600만원
- ‘개인정보 32만명 이상 유출’ 전북대, 1년 지나 과징금 6억원대 부과...사건 몸통 '해커' 여전히 '오리무중', 불안 지속
- 32만명 정보 털린 전북대 ‘과징금 6.2억’…경찰, 해커 추적 중단
- 전북대, 32만 건 해킹 피해로 올해 공공기관 개인정보 유출 1위..."관리체계 붕괴"
Other incidents at Jeonbuk National University
Questions raised over Jeonbuk National University's improvements after DDoS attack
Questions were raised about Jeonbuk National University's response, given that it had also been hit by a DDoS attack a year earlier. Whether improvements had been made after that attack became the point of contention.
Read on 전북일보 인터넷신문 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.