INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Korea Health Insurance Corporation Employees Leaked Personal Information

| 2026-10-16 08:55 CRITICAL LOW DATA BREACH
JSON
Executive Summary
AI-generated
In June 2021, an employee of the Korea Health Insurance Corporation (Geonbogongdan) allegedly leaked personal information of health insurance policyholders and their family members for over two years, receiving hundreds of thousands of dollars in the process. The employee was fired last month on suspicion of receiving large sums of money. As a result, at least 468 individuals have been affected by unauthorized access and disclosure of personal information, with victims being notified six months after the incident. The attack works by exploiting vulnerabilities in the corporation's data management system, allowing an individual to gain unauthorized access to sensitive information without detection for over 1,135 days. Currently, the National Health Insurance Corporation is under scrutiny from lawmakers for its inadequate response and failure to notify victims of the data breach within a reasonable timeframe.
Technical Mitigations AI-generated
• Regularly review and update the system for face-to-face education and personal information monitoring to improve detection of unauthorized activities. • Implement technical measures such as data loss prevention tools, intrusion detection systems, or security information and event management (SIEM) solutions to strengthen management and supervision. • Conduct regular audits and vulnerability assessments to identify weaknesses in the system that could lead to unauthorized access to personal information.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
KR
governmentgovernment healthhealth
Incident Timeline
‎2026/09/16
Threat actors used bribery to target employees of the Korea Health Insurance Corporation, who then leaked personal information.
‎2026/10/16
Employees of the Korea Health Insurance Corporation are reportedly receiving large sums of money to leak personal information, with victims being notified six months after the incident.
organisation The National Health Insurance Corporation
The National Health Insurance Corporation has been criticized for not informing victims of the data breach for over six months.
South Korean MP criticizes the National Health Insurance Corporation for failing to detect and prevent the unauthorized disclosure of personal information, stating that even if the incident is detected, immediate action should be taken.
organisation the Korea Health Insurance Corporation
Employees of the Korea Health Insurance Corporation (Geonbogongdan) are reportedly receiving large sums of money to leak personal information, with victims being notified six months after the incident..
organisation National Health Insurance Corporation
A National Health Insurance Corporation employee has been accused of leaking personal information of health insurance policyholders and their family members for over two years, receiving hundreds of thousands of dollars in the process.
organisation the People Power Party
At a parliamentary committee meeting on health and welfare affairs, lawmakers from the People Power Party and the Democratic Party of Korea expressed concerns about the incident and the corporation's management and supervision.
organisation the Democratic Party of Korea
At a parliamentary committee meeting on health and welfare affairs, lawmakers from the People Power Party and the Democratic Party of Korea expressed concerns about the incident and the corporation's management and supervision.
organisation The Personal Information Protection Act
" The Personal Information Protection Act stipulates that when an individual's personal information is leaked, the relevant facts should be notified to the information subject.
organisation Democratic Party
Democratic Party legislator Lee Seong-geuk stated that the time period from the initial unauthorized access to the detection of such behavior was as short as one day, and as long as 1135 days.
organisation the Korea Insurance Corporation
Kang Chee-hee, Chairman of the Korea Insurance Corporation, stated that nighttime or weekend activities are relatively easier to detect, but cases where employees appear to be conducting business as usual while accessing information are harder to detect.
organisation Kang
Kang Chairman also emphasized the need for pre-education and a surveillance system improvement, stating that punishment alone is not enough.
Intelligence Sources
Chosun Economy 2026-10-16