Ministry of Foreign Affairs Compromised in Suspected State-Sponsored Hack

In late 2025, South Korean intelligence revealed a significant cyber-espionage incident targeting the Ministry of Foreign Affairs. While initial technical signatures suggested North Korean involvement, further investigation by security experts indicated that Chinese state-sponsored actors may have been responsible for the intrusion. The attackers exfiltrated internal emails and diplomatic documents, raising serious concerns regarding the security of South Korea’s international communications and sensitive diplomatic intelligence.