The Korean Anti-Corruption and Civil Rights Commission acknowledged on October 8 that a data breach has compromised the personal information of approximately 100,000 individuals due to a hacking incident. The commission stated that it will work to prevent similar incidents in the future.
On the same day, the commission announced that the contractor responsible for the learning management system at the National Institute of Corruption Prevention had experienced a hacking incident after replacing the system last year, resulting in the leak of personal data stored in the previous system.
It added that the institute was notified of the data breach by the contractor around 10 p.m. on September 28. The following day, the commission informed the affected individuals and reported the breach to the Personal Information Protection Commission, awaiting further investigation.
The commission emphasized that it has formed a rapid response team to address the situation and is providing guidance on how to apply for dispute resolution regarding personal information, as well as information on potential secondary damages and response measures.
Additionally, the commission expressed regret over its failure to verify that the contractor had not destroyed the previous data after the system upgrade. It plans to conduct an internal audit to assess the adequacy of management and oversight and will carry out a comprehensive investigation of all personal data processing contracts to prevent similar incidents from occurring in the future.
Furthermore, the commission stated that it intends to impose sanctions on the contractor for contract violations, including designating them as an unreliable contractor and restricting their eligibility to participate in bids.
* This article has been translated by AI.
Copyright ⓒ Aju Press All rights reserved.