Source: Yonhap News Agency

What happened

According to Yonhap, South Korean officials said personal information of all South Korean diplomats was presumed leaked after a breach of an online education system run by the Korea National Diplomatic Academy (KNDA), an institution affiliated with the foreign ministry.

The ministry said it was notified in early February about suspicious access, then shut the system down; it has remained offline since. An investigation is under way. An unidentified hacker is believed to have gained server access sometime between April and May 2025 and maintained it until February.

The breakdown

Yonhap’s ministry sourcing draws a careful perimeter around what is known:

• The system held about 10,000 personal-data records; the breach is presumed to affect ministry personnel including retirees. Officials from other agencies deployed to overseas missions may also be in the pool because they sometimes use the system.
• Stored material reportedly included educational videos and trainee information: names, user IDs, positions, email addresses, and encrypted passwords.
• Ministry line: no indication that “sensitive personal data” such as identification numbers, mobile numbers, or home addresses was affected; some overlap among affected individuals is possible.
• Officials could not yet confirm that all stored data was compromised — 10,000 is framed as a maximum possible case count.
• Security framing: officials said they do not rule out overseas hacker groups and regard the situation as having national security implications.

Why it matters outside Korea

This is not a consumer password-reset story. Diplomatic identity data — even without home addresses — is targeting fuel: phishing, impersonation, and mapping of who served where. For overseas Koreans who interact with embassies and consulates, the practical lesson is vigilance on unexpected “ministry” emails, not panic about passport numbers appearing in a dump that officials say was not in scope.

It also fits a wider pattern: training platforms and “secondary” systems are often the soft door into institutions that look hard on the front.

What travelers and expats should watch

• If you get odd diplomatic-looking emails: verify through official channels; names and work emails are exactly the class of data described.
• What officials say was not in the affected set: ID numbers, mobile numbers, home addresses — still treat future updates as live.
• Retirees and temporary mission staff: the exposure frame is broader than currently posted diplomats alone.
• Status language: “presumed” and “maximum possible” mean the investigation is not finished.

Context

Korelay’s take: the overseas-useful read is the dwell time — access believed from spring 2025 until February notification — plus a ~10,000-record ceiling on a training system. That is enough to justify security seriousness without inventing a confirmed dossier of every diplomat’s private life.

Korelay take

Korelay’s take: the overseas-useful read is the dwell time — access believed from spring 2025 until February notification — plus a ~10,000-record ceiling on a training system. That is enough to justify security seriousness without inventing a confirmed dossier of every diplomat’s private life.

Editor note: Desk reporting supplies the timeline; Korelay adds the overseas behavior layer (what to change, what not to assume, what to re-check). If you only need the wire facts, open the primary link in Source.

Source

Yonhap: Information of all S. Korean diplomats presumed to be leaked: officials — paraphrased for briefing; read the original for full detail.