INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Ministry's Response Team Overwhelmed by Cyberattacks

| 2026-10-12 12:26 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
South Korea's Ministry of Foreign Affairs has seen a surge in cyberattacks targeting its embassies and consulates abroad, with over 20,000 reported incidents this year alone. The ministry's response team has been operating at full capacity for three years without a significant increase in personnel, six dedicated cybersecurity personnel being the only ones available to detect and analyze attacks on the ministry's headquarters and overseas embassies. These cyberattacks have resulted from an unknown security vulnerability used by attackers who accessed sensitive information of approximately 10,000 individuals, including former and current Ministry of Foreign Affairs employees, foreign affairs officials, and their families. The need for improvement in detection and response systems to counter these increasing attacks has been highlighted after a major data breach at the National Diplomatic School's online education system in February this year.
Technical Mitigations AI-generated
• Network Intrusion Prevention (ATT&CK mitigation for Phishing): Network intrusion prevention systems and systems designed to scan and remove malicious email attachments or links can be used to block activity. • Restrict Web-Based Content (ATT&CK mitigation for Phishing): Determine if certain websites or attachment types (ex: .scr, .exe, .pif, .cpl, etc.) that can be used for phishing are necessary for business operations and consider bloc • Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
governmentgovernment
Incident Timeline
‎May 2025
Threat actors accessed the Ministry of Foreign Affairs' system irregularly between April or May 2025 and February 2026.
‎2025/10/12
Threat actors launched over 20,000 cyberattacks this year.
general_metric 46 %
This represents a 46% increase from last year's 17,504 reported incidents, and has surpassed the total number of incidents from last year in just eight months.
general_metric 17,504 reported incidents
This represents a 46% increase from last year's 17,504 reported incidents, and has surpassed the total number of incidents from last year in just eight months.
‎February 2026
Threat actors accessed the Ministry of Foreign Affairs' system irregularly between April or May 2025 and February 2026, potentially leading to phishing attacks or account takeovers.
organisation the Ministry of Defense
The information of personnel deployed by the Ministry of National Intelligence Service and the Ministry of Defense at foreign embassies was also included.
organisation The Ministry of Foreign Affairs'
The need for improvement in detection and response systems to counter the increasing number of cyberattacks The Ministry of Foreign Affairs' cybersecurity extends beyond the protection of personal information of ordinary administrative agencies to also include national foreign activities and security.
‎January 1st to August 8th this year
The Ministry of Foreign Affairs reported 25,551 cyberattacks on its headquarters and overseas embassies from January 1st to August 8th this year.
organisation The Ministry of Foreign Affairs
According to data released by the Ministry of Foreign Affairs on 12th December, there were 25,551 reported cyberattacks on the ministry's headquarters and overseas embassies from January 1st to August 8th this year.
general_metric 25,551 reported cyberattacks
According to data released by the Ministry of Foreign Affairs on 12th December, there were 25,551 reported cyberattacks on the ministry's headquarters and overseas embassies from January 1st to August 8th this year.
‎2026/10/12
The Ministry of Foreign Affairs has seen a significant increase in cyberattacks targeting its embassies and consulates abroad.
organisation Ministry of Foreign Affairs
The ministry's response team has been operating at full capacity for three years without a significant increase in personnel.. South Korea's Ministry of Foreign Affairs has seen a surge in cyberattacks targeting its embassies and consulates abroad, but the personnel responsible for responding to these attacks have been stuck in place for years.
organisation the National Diplomatic School's
A major data breach at the National Diplomatic School's online education system in February this year has also highlighted the ministry's cybersecurity system as a problem.
organisation The Ministry of Foreign Affairs
The Ministry of Foreign Affairs reported that there were over 20,0005 thousand cyberattacks this year.
‎12th December
The Ministry of Foreign Affairs reported 25,551 cyberattacks on its headquarters and overseas embassies from January 1st to August 8th this year.
organisation The Ministry of Foreign Affairs
According to data released by the Ministry of Foreign Affairs on 12th December, there were 25,551 reported cyberattacks on the ministry's headquarters and overseas embassies from January 1st to August 8th this year.
general_metric 25,551 reported cyberattacks
According to data released by the Ministry of Foreign Affairs on 12th December, there were 25,551 reported cyberattacks on the ministry's headquarters and overseas embassies from January 1st to August 8th this year.
Intelligence Sources
Dailysecu 2026-10-12