INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Public Institutions Leaked 9,010,000 Cases of Personal Information

| 2026-10-14 18:08 HIGH LOW DATA BREACH
JSON
Executive Summary
AI-generated
On October 14, 2026, a significant data breach occurred involving public institutions in South Korea, with over 9 million cases of personal information leaked. The majority of the breaches were caused by internal negligence, accounting for approximately 60% and 2.3 times more than hacking incidents, which accounted for around 66.5% of all breaches. Business-related breaches occurred more frequently, while hacking incidents had a higher likelihood of large-scale data breaches. A total of nine penalty recommendations were made, with only six deemed work-related, resulting in a recommended penalty of just 6%. The incident affected multiple institutions, including the Seoul Metropolitan Office of Education, Korean Social Welfare Federation, and National Child Rights Protection Foundation, with the largest breach occurring at the Seoul Metropolitan Office of Education.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope
Incident Timeline
‎2025/10/14
As of October 14, 2025, public institutions had disposed of more than the annual disposal number from the previous year with 38 cases already resolved.
general_metric 38 cases
As of this year, 38 cases have been disposed of so far, exceeding the annual disposal number of last year.
‎August 2026
The Personal Information Protection Commission reported that 144 disciplinary actions were taken regarding personal information leaks by public institutions from 2022 to August 2026.
organisation the Personal Information Protection Commission
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
organisation the National Assembly's
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
organisation Administrative Affairs Committee
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
organisation the People Power Party
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
infrastructure 144 disciplinary actions
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
organisation the Seoul Metropolitan Office of Education
The main data breach scale by institution was the Seoul Metropolitan Office of Education with 2,966,485 cases, the Korean Social Welfare Federation with 1,353,327 cases, and the National Child Rights Protection Foundation with 1,146,113 cases.
organisation the Korean Social Welfare Federation
The main data breach scale by institution was the Seoul Metropolitan Office of Education with 2,966,485 cases, the Korean Social Welfare Federation with 1,353,327 cases, and the National Child Rights Protection Foundation with 1,146,113 cases.
organisation the National Child Rights Protection Foundation
The main data breach scale by institution was the Seoul Metropolitan Office of Education with 2,966,485 cases, the Korean Social Welfare Federation with 1,353,327 cases, and the National Child Rights Protection Foundation with 1,146,113 cases.
‎2026/10/14
Public institutions leaked 9,010,000 cases of personal information due to internal negligence in six out of ten disciplinary actions.
infrastructure 10 disciplinary actions
Public institutions have reported six out of 10 disciplinary actions related to personal information leaks, which were not caused by external hacking but by internal negligence.
Tactical Metrics
Metrics
infrastructure
144
Disciplinary Actions
According to the data submitted by the Personal Information Protection Commission on 14th of the month, a member of the National Assembly's Administrative Affairs Committee of the People Power Party, Park Sung-hoon, reported that from 2022 to August 2026, a total of 144 disciplinary actions were taken regarding personal information leaks by public institutions.
Metrics
infrastructure
10
Disciplinary Actions
Public institutions have reported six out of 10 disciplinary actions related to personal information leaks, which were not caused by external hacking but by internal negligence.
Intelligence Sources
Dailysecu 2026-10-14