South Korea Discloses Data Breach Impacting Diplomats Worldwide

South Korea's Ministry of Foreign Affairs disclosed that the Korea National Diplomatic Academy's online training platform was compromised via a zero-day and misconfiguration in April–May 2025, remaining undetected for roughly 10 months and exposing user IDs, full names, email addresses, and encrypted passwords for about 10,000 diplomatic personnel; the National Intelligence Service detected abnormal access in February 2026, the system was taken offline, and public disclosure followed in July 2026 amid concerns about delayed notification and potential exposure of intelligence-operational personnel.