PrivacySignal
Breach

Personal data of all South Korean diplomats believed leaked in ‘unprecedented’ cyberattack

DataBreaches.net · · International · Data Breaches

South Korea's Foreign Ministry has disclosed a cyberattack on the Korea National Diplomatic Academy that is believed to have compromised personal data belonging to nearly all of the country's diplomatic personnel. The breach may have exposed up to 10,000 administrative and intelligence records, which the ministry described as unprecedented in scale.

Why this matters: This is not a consumer data breach where stolen emails get sold for spam. These are diplomats — people whose identities, postings, and personal details carry real operational risk when exposed. Knowing who a country's diplomats are, where they work, and what records are attached to them is exactly what foreign intelligence services want. If the data is in hostile hands, the damage is not just embarrassing. It can compromise ongoing missions, expose personal vulnerabilities, and put people in danger. The scale — nearly the entire diplomatic corps — makes this harder to contain than a targeted hit.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Breach
BleepingComputer · · International

IDScan sued over alleged data breach affecting 153 million drivers

Identity verification company IDScan faces multiple lawsuits after hackers allegedly broke into its systems and offered to sell data from more than 153 million driver's licenses on the open market.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →
Breach
BleepingComputer · · International

39 New Methods That Compromise Passkey Authentication

Passkeys eliminate many password-based attacks, but researchers have documented 39 methods for compromising authentication built around them. Token explains how attackers can abuse authentication prompts, synced credentials, enrollment, recovery, and other trust boundaries without breaking FIDO2 cryptography. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

Breach
DataBreaches.net · · International

DaVita settles ransomware attack lawsuit for $15M

DaVita, a national kidney dialysis company, has agreed to a $15 million class action settlement following a 2025 ransomware attack that exposed patient data, much of which was subsequently leaked on the dark web.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance · Healthcare professionals

#breach#enforcement#healthcare#security Read original →
Breach
DataBreaches.net · · International

FBI probes suspected breach at IDScan.net after dark web service Nexus offered 153M+ US and Canadian driver’s license scans

A dark web service called Nexus began offering searchable access to more than 153 million scanned driver's licenses from the US and Canada, with IDScan.net suspected as the source of the breach. The FBI's New Orleans field office opened a formal investigation on the same day the service appeared.

Who should care: Cybersecurity · Privacy officers · Administrators · Lawyers · Compliance

#breach#enforcement Read original →