Korean Diplomatic Academy Hacked for Nearly 10 Months, Data Potentially Compromised

The Korea National Diplomatic Academy's online training platform was hacked for nearly 10 months, from April 2025 to February 2026. Attackers exploited a zero-day vulnerability in the server software, allowing them to maintain access and potentially expose personal data of diplomats and officials. The breach was detected only after an external agency alerted the Foreign Ministry in early February 2026. The compromised server stored educational materials and personal information, including names and user IDs of users. The Foreign Ministry has shut down the system since the breach was discovered and an investigation is ongoing to assess the extent of the data leak. The ministry has stated that it is currently difficult to determine the specific details of the leaked information.

Key Points: • Attackers exploited a zero-day vulnerability to breach the online training platform. • The system was compromised for nearly 10 months before detection in February 2026. • Personal data of diplomats and senior officials may have been exposed.