Prolonged hack of Foreign Ministry leaks about 10,000 staff records
The Ministry of Foreign Affairs was hacked over a period of ten months, leaking about 10,000 records of staff information. Notification of the staff data leak was delayed, and reporting the damage also took five months. The ministry added one dedicated staff member to handle personal data leaks and quadrupled its cybersecurity budget for the following year.
Key facts
- Affected organization
- Ministry of Foreign Affairs
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- About 10,000 staff records
- Cause / method
- Hack through the supply chain
- Location
- South Korea
If your data was exposed
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organization’s official website or app.
- If you’ve suffered harm, report it. Call 118 (no area code) for privacy violations, contact the police for financial losses, and apply for dispute mediation to seek compensation.Personal Information Infringement Report Center ↗Korean National Police Agency cybercrime report ↗Personal Information Dispute Mediation Committee ↗
Lookup and notice links are official pages found by AI. Make sure the address is on the organization’s official domain before using it.
Timeline
- It became known that the Ministry of Foreign Affairs belatedly disclosed a staff data leak after being hacked for ten months.
- The Foreign Ministry hack was cited as an example of a supply chain threat.
- The ministry added one dedicated staff member to handle personal data leaks.
- It became known that the ministry quadrupled its cybersecurity budget for the following year.
- It emerged that it took five months to report the damage from the leak of about 10,000 records.
6 related reports
Other incidents at Ministry of Foreign Affairs
Personal data of 168 presidential aircraft passengers, including president and spouse, leaked
168Impact: Personal information of 168 passengers aboard Air Force One, including the president and spouse
Personal information, including passport numbers, of 168 passengers aboard the presidential aircraft, Air Force One, including the president, the president’s spouse, and cabinet members, was posted on VirusTotal and exposed for approximately five months. The Ministry of Foreign Affairs took steps to remove the posted information and reissue passports for all passengers, and completed the reissuance of passports for the president and spouse. Police launched a formal investigation and are examining how the leak occurred, including the possibility that the ministry’s contracted security monitoring provider uploaded an email attachment to an external scanning site.
Related reports: 133 · last report →DDoS attack temporarily disrupts access to South Korean foreign ministry website
Impact: Temporary access outage on the ministry's website
On the afternoon of April 17, 2026, the website of South Korea's Ministry of Foreign Affairs suffered a temporary access outage due to a DDoS attack. A Russian hacker later claimed to have attacked the ministry and other government agencies in response to South Korea's support for Ukraine.
Related reports: 3 · last report →Indonesian and Bangladeshi hackers claim DDoS attacks on South Korea
Indonesian and Bangladeshi hackers claimed to have carried out DDoS attacks against South Korean media outlets and the Ministry of Foreign Affairs. Whether any actual damage occurred and its extent have not been confirmed.
Read on 보안뉴스 ↗Anonymous BD launches DDoS attack on South Korea's foreign ministry over support for Israel
South Korea's Ministry of Foreign Affairs was hit by a DDoS attack by Anonymous BD. Support for Israel was given as the reason for the attack, and the specific extent of the damage and the response have not been confirmed.
Read on 보안뉴스 ↗South Korean foreign ministry email hacking alleged; unauthorized access denied
Impact: Alleged hacking of 4.5GB of emails
Allegations emerged that 4.5GB of South Korea's Ministry of Foreign Affairs emails were hacked by China's Ministry of State Security in January 2022. In March 2025, the US Department of Justice indicted eight Chinese hackers on charges including hacking South Korea's Ministry of Foreign Affairs. The ministry said there was no record of unauthorized access to its mailboxes.
Related reports: 5 · last report →
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organization’s official statements for accurate details.