Summary
South Korea's Ministry of Foreign Affairs disclosed that attackers exploited a vulnerability in the Korea National Diplomatic Academy's online training platform and maintained access from April 2025 until detection in February 2026. Roughly 10,000 records covering about 6,000 current and former diplomats were exposed, including names, user IDs, emails, encrypted passwords, titles and department affiliations; investigators are examining possible North Korean involvement.
Sources
Attribution
Suspected North Korea-linked actors (under investigation)
South KoreaEU relevance
Low
No EU member state, EU response or EU project sector involved
Graded by rules: EU member states affected, EU response, EU sanctions, EU projects in the sector hit.