Archive · 21 Jul 2026
South Korea investigates diplomatic academy cyberattack
South Korea is investigating a cyberattack on a government-run diplomatic academy.
Hackers exploited a software vulnerability to access the system between April 2025 and February 2026.
They may have stolen personal information of about 6,000 diplomats and officials.
The government is working to determine the full extent of the breach and strengthen cybersecurity.
A North Korean-linked hacking group is suspected, but no misuse of the leaked data has been confirmed.
A cyberattack on the Korea National Diplomatic Academy's online education system exposed a significant amount of data.
Attackers exploited a zero-day software vulnerability and security weaknesses to gain control of a server between April and May 2025.
The system was blocked in February 2026 after suspicious activity was reported.
Personal information of about 6,000 diplomats and officials may have been compromised.
Intelligence authorities are investigating a potential North Korean-linked hacking group.
- Who
- South Korean Foreign Ministry and intelligence authorities
- What
- Cyberattack on the Korea National Diplomatic Academy's online education system
- When
- Attackers gained control between April and May 2025; system blocked in February 2026
- Where
- South Korea
- Why
- To exploit a zero-day software vulnerability and security configuration weaknesses
Government Response
Potential Hackers
Investigation and Attribution
Government Response
The South Korean government is conducting a thorough investigation to determine the full extent of the breach and strengthen cybersecurity systems.
Potential Hackers
A North Korean-linked hacking group is suspected of targeting the data, including information on overseas diplomats.
- Date of Attack Discovery
- February 2026
- Duration of Access
- April 2025 to February 2026
- Potential Data Leaked
- Training videos, participants' names, user IDs, and personal information of about 6,000 diplomats and officials
- Investigating Agencies
- South Korean Foreign Ministry and intelligence authorities
- Suspected Hacking Group
- North Korean-linked