Months-long breach exposes South Korean diplomats’ personal data

South Korea’s Foreign Ministry disclosed a breach of the Korea National Diplomatic Academy’s online training platform (launched 2022) in which attackers exploited a zero-day vulnerability between April 2025 and February 2026, compromising usernames, names, email addresses and encrypted passwords for roughly 10,000 current and former diplomats and ministry staff; the system is offline, mitigations are being implemented, technical analysis is ongoing, and while the tactics are consistent with North Korean state-linked groups no formal attribution has been made.