INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

President Lee compromises passenger data via classified government documents

| 2026-11-02 15:55 CRITICAL LOW DATA BREACH
Executive Summary
AI-generated
On November 2, 2026, the personal information of South Korean President Lee Jae-myung and his spouse was leaked on the internet for five months. The list, titled "Passenger List (South Korea-Belgium)," included high-ranking officials such as Kim Yong-bum, Director of the National Security Office at the Blue House, and Han Sung-sook, Minister of Small and Medium Enterprises, affecting a total of 168 people. The leak is believed to have originated from a security-related paid website that scans for malicious code, operated by a subsidiary of a well-known tech giant, which allows users to upload files without restrictions. The leaked information included full names, affiliations, dates of birth, passport numbers, and dates of issuance and expiration, posing the risk of impersonation or targeted attacks if combined with other personal data. Authorities are currently investigating the source of the leak, considering both government agencies and security-related websites as potential culprits.
Technical Mitigations AI-generated
• User Training (ATT&CK mitigation for Impersonation): Train users to be aware of impersonation tricks and how to counter them, for example confirming incoming requests through an independent platform like a phone call or in-
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
BE FR KR
governmentgovernment
Incident Timeline
‎2026/11/02
The president attended the G7 summit in France's Évian-les-Bains and a state visit to Belgium in June, which is believed to be the source of the information.
organisation the National Security Office
organisation the Blue House
organisation the South Korean Air Force's
organisation Blue House and Foreign Ministry
organisation the Central Election Management Committee
Intelligence Sources