AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 09/22/2026 at 11:34 PM EST
South Korea Tightens Data Breach Enforcement
Coverage from Korea News Plus, Circuit Magazine, and others
South Korea is responding to major breaches affecting matchmaking, credit-card, and diplomatic-training systems with larger fines, service restrictions, and closer scrutiny of data-protection failures.
The incidents exposed sensitive personal information and revealed recurring weaknesses including missing patches, inadequate encryption, excessive retention, misconfigured systems, and delayed detection or notification. Together, they show enforcement expanding beyond the breach itself to include prevention, data minimization, retention, and incident-response practices.
Looking Back
104 Day Timeline
Apr 23
May 11
May 27
Jun 14
Jun 30
Jul 18
Aug 3
History
09/09/2026
The update adds the National Intelligence Service as a reported detector or notifier of the diplomatic-academy intrusion and provides more specific infrastructure failures. The core breach, enforcement, and delayed-disclosure narrative remains largely unchanged.
08/24/2026
The story has expanded from a government-system intrusion into a broader South Korean data-protection enforcement story spanning commercial, financial, and government breaches. Regulators are now imposing substantial fines and operational restrictions, increasing the urgency and significance of the issue.
All Articles25 articles
Important
South Korea's Financial Services Commission suspended Lotte Card for 1.5 months and fined Lotte Card 5 billion won in Seoul after a 2025 cyberattack exposed nearly three million customers' personal information.
8/3/2026 • Regulation, Law & Enforcement • General
South Korea's Foreign Ministry disclosed in 2026 that hackers accessed the Korea National Diplomatic Academy training platform for ten months, stealing credential data.
7/24/2026 • Data Breaches & Exposure Events • General
South Korea's National Intelligence Service discovered a 10-month breach of the National Diplomatic Academy system in February 2026, exposing personal data of Ministry of Foreign Affairs employees.
7/23/2026 • Data Breaches & Exposure Events • General
South Korea investigates a suspected data leak at a government-run diplomat training academy, with about 10,000 diplomat records potentially affected.
7/21/2026 • Data Breaches & Exposure Events • General
South Korea's Foreign Ministry announced a data breach at the Korea National Diplomatic Academy online system after suspicious access notifications in early February.
7/21/2026 • Data Breaches & Exposure Events • General
Boram Sangjo faced an administrative fine in South Korea after May 2024 hacking exposed 27,882 records and triggered delayed breach notification and retention violations.
5/18/2026 • Regulation, Law & Enforcement • General
South Korea police and the PIPC investigated a Duo Info breach after exposure of detailed matchmaking and personal data for 430,000 members, with notification delayed until the PIPC announcement.
4/26/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in 2024 after a January hack exposed sensitive matchmaking members' personal data.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in connection with a January hack exposing sensitive member data from the Duo matchmaking service.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea's Personal Information Protection Commission fined Duo in 2024 after a January breach exposed sensitive personal data from over 420,000 matchmaking members.
4/23/2026 • Data Breaches & Exposure Events • General
South Korea disclosed in 2026 a ten-month breach of the National Diplomatic Academy online education system that exposed MFA employees data, including overseas diplomats.
7/22/2026 • Data Breaches & Exposure Events • General
Unidentified hackers compromised an online education system used by South Korea's Korea National Diplomatic Academy, potentially exposing ministry employees and trainees, after a zero-day vulnerability was exploited.
7/20/2026 • Data Breaches & Exposure Events • General
South Korea's Financial Services Commission suspended Lotte Card's new-customer operations in Seoul on August 1 after a hacking incident exposed information from nearly 3 million customers.
8/3/2026 • Regulation, Law & Enforcement • General
South Korea's Financial Services Commission suspended Lotte Card's new-customer business and fined the Seoul-based issuer after a hacking attack compromised nearly three million customers' personal information.
8/3/2026 • Regulation, Law & Enforcement • General
South Korea's Financial Services Commission fined Lotte Card 5 billion won and suspended new card issuance after a payment-system hack exposed 2.97 million customers.
7/31/2026 • Data Breaches & Exposure Events • General
South Korea SMEs minister Han Seong-sook apologized after a Startup For All Project breach exposed first-round applicants' ideas and email addresses, with investigation underway.
6/22/2026 • Data Breaches & Exposure Events • General
South Korea's Ministry of SMEs and Startups announced trade secret certification and security inspections after a breach exposed data from 5,000 Startup for All applicants in Seoul.
6/22/2026 • Data Breaches & Exposure Events • General
Boram Sangjo Development received an administrative fine in South Korea after a May 2024 hacking incident exposed 27,882 personal data items and triggered delayed breach notice.
5/18/2026 • Data Breaches & Exposure Events • General
Boram Sangjo was fined in South Korea after a May 2024 hacking incident exposed 27,882 personal information records, with late breach notification and improper retention.
5/14/2026 • Data Breaches & Exposure Events • General
Interesting
South Korea's Financial Services Commission suspended Lotte Card's new-customer registrations from Aug. 1 to Sept. 15 after a breach affected millions of cardholders.
8/3/2026 • Data Breaches & Exposure Events • General
Boram Sangjo was fined for a May 2024 personal data breach in which 27,882 records were exposed, with enforcement tied to late notification and retention failures.
5/18/2026 • Regulation, Law & Enforcement • General
Boram Sangjo received an approximately 554 million won administrative fine after a May 2024 hacking incident exposed member personal data in South Korea.
5/18/2026 • Data Breaches & Exposure Events • General
Boram Sangjo in South Korea was fined in 2024 after a May 2024 hack exposed 27,882 personal records and breach notices were sent after the statutory deadline.
5/14/2026 • Regulation, Law & Enforcement • General
South Korea Financial Supervisory Service reportedly ordered a 4.5 month suspension of Lotte Card after a breach exposed nearly three million customers.
5/1/2026 • Data Breaches & Exposure Events • General
South Korean regulators sanctioned Lotte Card in South Korea after a data breach affected 2.97 million people, allowing MBK Partners to prepare a renewed sale.
8/4/2026 • Data Breaches & Exposure Events • General