Translating into Español. The English version is shown until it is ready.
Korea anti-corruption agency training site hacked; 100,000 users' data leaked
En breve
About 100,000 users of South Korea's Integrity and Rights Learning Center, an online integrity-education platform overseen by the Anti-Corruption and Civil Rights Commission, had personal data leaked after the server of the outsourced operator was hacked last month, government officials said. Leaked items included user IDs, passwords, names, gender and job titles. One outlet reported the breach may stretch to 22 sites and up to 300,000 records.
Leer la noticia completa 2 min de lectura
About 100,000 users' personal data from the Integrity and Rights Learning Center, an online integrity-education platform overseen by South Korea's Anti-Corruption and Civil Rights Commission, was leaked after the server of the outsourced operator was hacked last month, according to government officials cited by Yonhap and other outlets. The leaked data included user IDs, passwords, names, gender, affiliation and job titles. [ 2 , 3 , 5 ]
The platform is used by employees of public institutions, staff of private schools and people at other public-service-related organisations to take integrity education online. The compromised server belonged to the outsourcing company that operated the platform, not to the commission itself, outlets reported, and a government official said the damage occurred because the company retained the database instead of discarding it. [ 2 , 3 , 5 ]
Hankook Ilbo named the operator as Malgeunsoft and reported that the contract between the company and the Integrity and Rights Education Institute, which manages the platform, included a personal-data destruction clause, but that the institute did not separately check whether personal data remained with the company. [ 5 ]
Hankook Ilbo also reported that data was taken from 22 sites, including a Defence Ministry training site for barracks-life counselling officers and the Kobaco advertising academy, and that the security industry estimated total damage of up to 300,000 records. Kukmin Ilbo's headline, published earlier the same day, referred to hundreds of thousands of people at public institutions, a figure the documents do not reconcile with the 100,000 users reported for the learning centre. [ 1 , 5 ]
Hankook Ilbo said the incident appears to be part of hacking attacks targeting the financial sector spreading into public institutions. The Integrity and Rights Education Institute said it would strengthen security checks on contracted companies and tighten management and oversight of outsourced personal-data processing. [ 5 ]
The documents do not say whether affected users have been notified or whether an investigation has been opened. [ 2 , 3 , 5 ]
Por qué importa
The breach extends into public-sector platforms a wave of hacking incidents that Hankook Ilbo said began in the financial sector, putting the handling of personal data by government contractors under scrutiny. Hankook Ilbo reported that the contract contained a personal-data destruction clause but that its execution was not separately checked, a point open to regulatory and public criticism.
Datos clave
- About 100,000 users' personal data from the Integrity and Rights Learning Center was leaked after the outsourced operator's server was hacked last month, according to government officials. [ 2 , 3 , 4 , 5 ]
- Leaked data included user IDs, passwords, names, gender and job titles. [ 2 , 3 , 5 ]
- The hacked server belonged to the outsourcing company, not to the Anti-Corruption and Civil Rights Commission, outlets reported. [ 2 , 3 , 5 ]
- A government official said the company kept the database instead of discarding it, which led to the leak. [ 2 , 3 ]
- Hankook Ilbo named the operator as Malgeunsoft and said the contract with the Integrity and Rights Education Institute included a personal-data destruction clause. [ 5 ]
- Hankook Ilbo reported that 22 sites, including a Defence Ministry counselling training site and the Kobaco advertising academy, were also affected, and that the security industry estimated total damage of up to 300,000 records. [ 5 ]
- The Integrity and Rights Education Institute said it would strengthen security checks on contractors and tighten oversight of outsourced personal-data handling. [ 5 ]
Confirmado por varias fuentes
- About 100,000 users' personal data from the Integrity and Rights Learning Center was leaked after the outsourced operator's server was hacked, government officials said. [ 2 , 3 , 4 , 5 ]
- Leaked data included user IDs, passwords, names, gender and job titles. [ 2 , 3 , 5 ]
- The hacked server was the outsourcing company's, not the commission's. [ 2 , 3 , 5 ]
- The platform is used by public institution employees and private school faculty for online integrity education. [ 2 , 3 , 5 ]
- A government official said the company did not discard the database but retained it, which caused the leak. [ 2 , 3 ]
Aún sin aclarar
- The total scale of the breach Kukmin Ilbo's headline referred to hundreds of thousands of people at public institutions, while Hankook Ilbo, citing the security industry, estimated up to 300,000 records across 22 sites; the documents do not reconcile these figures.
- The identity of the outsourcing company Only Hankook Ilbo named the operator as Malgeunsoft; the other documents call it an outsourced or agency operator without naming it.
- The other affected sites Only Hankook Ilbo mentioned 22 sites, including the Defence Ministry counselling training site and the Kobaco advertising academy; other documents do not refer to them.
- Whether affected users have been notified and whether an investigation has been opened The documents do not address notification or any probe.
Qué dicen los medios locales
Cronología, hora local
- Kukmin Ilbo publishes an exclusive report that the Anti-Corruption and Civil Rights Commission suffered hacking damage, with personal data of hundreds of thousands of people at public institutions taken. [ 1 ]
- Yonhap reports that about 100,000 users' personal data from the Integrity and Rights Learning Center leaked after the outsourced operator's server was hacked last month. [ 2 ]
- Maeil Business reports the same figure, citing Yonhap and government officials, and notes the hacked server was the contractor's, not the commission's. [ 3 ]
- Newsis publishes a report under the same headline figure of about 100,000 affected users. [ 4 ]
- Hankook Ilbo reports the operator's name, the missing destruction check and 22 affected sites, with a security-industry estimate of up to 300,000 records. [ 5 ]