韩国民间认证机构服务器遭黑客入侵并泄露总统办公室相关人员名片级信息

A server operated by a private certification agency in South Korea was hacked, exposing personal information belonging to senior officials at the presidential office.
According to industry sources on Aug. 20, the Busan Metropolitan Police Agency is investigating the breach of the private certification agency’s server. Police discovered personal information belonging to presidential office officials and other prominent individuals in the compromised data.
The leaked information reportedly includes names and mobile phone numbers. Police said, however, that the incident did not involve a breach of the presidential office’s own servers. No related breach report has been filed with the Personal Information Protection Commission (PIPC) so far.
There are conflicting assessments over who was behind the attack. Some have raised the possibility that a North Korean hacking group was involved, but police said the claim has yet to be verified. Separately, the Seoul Metropolitan Police Agency is investigating hacking incidents involving a server management company for a domestic media outlet, a hospital and a pharmaceutical company.
Some cybersecurity experts say a possible connection to Lazarus, a North Korean hacking group, cannot be ruled out. Lazarus and other North Korean hacking groups are known to have recently targeted South Korean institutions and companies through “watering hole” attacks, in which websites frequently visited by intended targets are compromised in advance.
Relevant authorities have also issued warnings about such threats. The National Intelligence Service (NIS), Korean National Police Agency, Korea Internet & Security Agency (KISA), Financial Security Institute (FSI) and a public-private joint analysis council issued a joint security advisory in July warning of cyberattacks by state-sponsored hacking groups. The advisory warned that hacking groups were distributing phishing emails disguised as resumes, job offers and donation requests, and that users could be infected with malware by clicking links or opening attachments.