TIME SINCE MOST RECENT KOREAN CYBERSECURITY FAILURE
Healing Paper / Gangnam Unnie
Healing Paper said abnormal access to a consultation-history inquiry API on September 4 led to a leak of some customers’ personal information. The company blocked the access path after detection and later requested a police investigation.
JLS / Jaranda / Fly
Several South Korean startup-related services reportedly suffered customer data leaks. The article says personal data was exposed at the language academy JLS, the early-childhood education platform Jaranda, and the delivery platform Fly.
29CM
South Korean fashion commerce platform 29CM confirmed that abnormal API access exposed customer personal information. The company said it discovered the issue on August 27 and reported it to authorities.
Private authentication agency serving South Korean officials
Police reported that personal information of prominent South Korean figures, including high-ranking officials, was leaked after a breach at a private authentication agency. Authorities said the Presidential Office servers were not directly hacked, but sensitive contact details were stolen through the vendor incident.
Multiple South Korean institutions
South Korean police said a hacking campaign believed to be linked to Lazarus has hit 102 domestic institutions, including news outlets, hospitals, and pharmaceutical companies. Authorities are investigating the cases as a possible state-backed intrusion campaign.
South Korea public institutions
South Korea’s privacy regulator reported that 164 state-run institutions exposed personal data in the first half of 2026. The article frames this as a newly reported surge in breaches affecting public agencies rather than a single isolated intrusion.