Resident registration numbers and medical certificates exposed in public agencies’ disclosure portal documents
Personal and sensitive information, including resident registration numbers, passport numbers, and cancer diagnosis certificates belonging to public officials and private individuals, was exposed in attachments to 35 documents from at least 22 public agencies published on the Information Disclosure Portal. The causes were identified as failures by the agencies that created the documents to apply nondisclosure and masking settings, along with limitations in filtering unstructured files. The Ministry of the Interior and Safety suspended downloads of original documents on November 5 and launched a comprehensive inspection of public agencies, while an investigation into the scale of the exposure was still underway on November 9.
Key facts
- Affected organization
- Ministry of the Interior and Safety
- Incident type
- Data breach
- Occurred / detected
- 2026-11-05
- Scale of damage
- Personal and sensitive information exposed in attachments to 35 documents from at least 22 public agencies
- Cause / method
- Failures by the agencies that created the documents to apply nondisclosure and masking settings, and limitations in filtering unstructured files
- Location
- South Korea
If your data was exposed
Exposed dataNational ID numberHealth & medical data
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- Block new mobile phone activations in your name, and register with the Financial Supervisory Service as a person whose personal data was exposed to strengthen identity checks on financial transactions in your name. If a copy of your ID was leaked, consider having it reissued.Identity theft prevention service (M-Safer) ↗Personal data exposure accident prevention system ↗
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- Following the exposure of personal information on the Information Disclosure Portal, the Ministry of the Interior and Safety suspended downloads of original documents and asked all public agencies to conduct a comprehensive inspection.
- While the investigation into the scale of the personal information leak was ongoing, it emerged that a leak had also been reported seven months earlier.
12 related reports
- 행안부, ‘정보공개포털’ 원문 다운로드 긴급 차단... “개인정보 전수점검 착수”
- 금융권 37개사에서 해킹사고 40건…금융당국, 보안 전수점검
- 금융권 37개사서 정보 47만건 유출…580곳 보안 전수점검
- 금융권 37개사 해킹에 정보 47만건 유출···당국, 580개사 보안 전수점검
- '정보공개포털' 개인정보 노출…행안부 "공공기관 전수점검"
- 정보공개포털서 암진단·주민번호 등 개인정보 노출···행안부 “국민께 송구···다운로드 중단 후 전수 점검”
- 정보공개포털서 암 진단서 등 개인정보 노출···행안부 “국민께 송구” 사과
- 금융권 해킹에 정보 47만3000건 유출…당국, 580개사 전수점검
- 정보공개포털서 주민번호·암 진단서 등 개인정보 노출…행안부 긴급 점검
- 정부 정보공개포털서 주민번호·암 진단서까지 개인정보 노출…행안부, 원문 다운로드 전면 중단
- 정보공개포털서 개인정보 유출…피해 규모 조사 중
- [단독] 정보공개포털 개인정보 유출 7개월 전 신고 있었다…정부는 ‘늑장 대응’
Other incidents at Ministry of the Interior and Safety
Government24 hack exposes memory dump files from 11 servers
Impact: Memory dump files stolen from 11 servers; an estimated 36 resident registration numbers, three phone numbers, and 55 IDs and passwords exposed
An attack targeting a vulnerable page on Government24’s children’s portal on August 17 resulted in the theft of memory dump files from 11 servers. The Ministry of the Interior and Safety estimated that 36 resident registration numbers, three phone numbers, and 55 IDs and passwords may have been exposed, but could not identify the victims or the precise scope of the leak because the attacker erased traces of the intrusion. The incident notice was hidden after 30 days and deleted following media coverage.
Related reports: 5 · last report →Cyberattack blocks Interior Ministry relay server, disrupting real estate app
Impact: Service outage at a real estate transaction price app
A cyberattack caused a relay server of the Ministry of the Interior and Safety to be temporarily blocked. As a result, a real estate transaction price app experienced a service outage.
Read on Chosunbiz ↗Government systems including Interior Ministry's Onnara system hacked
Suspicions were raised of hacking, presumed to be the work of North Korea, targeting the Ministry of the Interior and Safety, the Ministry of Foreign Affairs and the Defense Counterintelligence Command. On October 17, 2025, the government confirmed traces of hacking in systems including the Onnara system.
Related reports: 12 · last report →Government24 user's move-in report exposed on Google search for over 3 days
1Impact: Address, mobile phone number and first part of the resident registration number of one Government24 user
The move-in report of one Government24 user was publicly accessible through Google search for at least three days. The user's address, mobile phone number and the first part of the resident registration number were exposed. The search results have been removed, and the exact cause of the exposure is under investigation.
Read on 뉴스1 ↗Government24 source code error leaks personal data of 1,233 people
1.2KImpact: Personal data of 1,233 people
In early April 2024, a source code error related to civil documents and tax payment certificates on Government24 leaked the personal data of 1,233 people. An investigation by the Personal Information Protection Commission (PIPC) found missing tests and unaddressed vulnerabilities, among other issues. The PIPC imposed penalties including a fine of 273 million won on the Ministry of the Interior and Safety.
Related reports: 40 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.