Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People

Cybersecuritynews •Tushar Subhra Dutta • October 7, 2026

Hackers breached two major South Korean churches, exposing more than one million congregant records and extensive financial and administrative data. The investigation reveals how web shells, leaked credentials, and weak access controls opened routes into connected systems. In one case, attackers entered through a web shell planted in an enterprise resource planning, or ERP, system. […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Cyberattack on South Korean Churches Exposes Data of Over 1 Million Members Two major South Korean churches, Yoido Full Gospel and SaRang, experienced significant cyberattacks resulting in the exposure of personal data from over 1 million congregants. The attackers exploited vulnerabilities in the churches' enterprise resource planning (ERP) systems through a web shell and leaked credentials. The breach included sensitive information such as names, addresses, and offering records, with Yoido Full Gospel Church reporting approximately 960,000 member records compromised. The attack was traced back to an overseas server, and evidence suggests the use of artificial intelligence in the hacking process. Oasis Security, a cyber threat intelligence firm, confirmed the attacks and noted that the data was exfiltrated between August 28 and September 1, 2026. Both churches are currently investigating the incidents and have taken steps to secure their systems. The total volume of data exposed is estimated at 47.3 GB. 9 sources 69

Extracted Entities

Hackers Breach Two Major South Korean Churches, Exposing Data of Over 1 Million People

The full story

Extracted Entities

Attack Types (2)

CWE Weaknesses (1)

MITRE ATT&CK (1)

Platforms (1)