Skip to content

Personal Information Protection Commission

South Korea's data protection regulator, which enforces the Personal Information Protection Act and can fine companies for breaches and unlawful handling of personal data.

Known aliases

  • Japan's privacy regulator
  • Korea Personal Information Protection Commission

Current stories

securityConfirmed2 publishers

Burger King Japan app breach reached 11.18 million customer records over six days

Burger King Japan says attackers who accessed its app member system from Oct 2 to 7 reached 11.18 million customer records, and the data has leaked online. The company warned affected customers to watch for emails, SMS messages and calls that may impersonate it.

Reality

Evidence68
Adoption
Not scored
Hype gap−10
Incentives
Not scored
Confidence66
investOne report1 publisher

South Korea moves to discipline agency heads over unchanged passwords and ignored flaws

South Korea plans to discipline public-agency heads for basic cyber lapses after 247 public-sector breaches since 2021 led to no head being disciplined. The penalties are headed into the rules now, while the staff incentives and the security budget are still being worked out.

Publishers:en.sedaily.com

Reality

Evidence45
Adoption
Not scored
Hype gap+15
Incentives50
Confidence55
securityConfirmed3 publishers

Patchable VPN flaw exposed 246,000 personnel records on Japan's shared government platform

Japan's Digital Agency says an intruder used a medium-severity VPN bug that already had a patch, then worked through a maintenance account on a file platform shared by 23 ministries. Disclosure came 78 days after detection.

Perspective Coverage

3 publishers
Builder
Builder 23%
Operator
Operator 70%
Investor
Investor 7%

Reality

Evidence72
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence70
securityConfirmed6 publishers

Gyazo's breach exposed the 32-character image IDs that were the only protection on older captures

Helpfeel says an attacker took about 490 million Gyazo image metadata records, including the IDs that build every capture link, and the company has disabled viewing of some images and asked every user to change their password.

Perspective Coverage

6 publishers
Builder
Builder 23%
Operator
Operator 67%
Investor
Investor 10%

Reality

Evidence70
Adoption60
Hype gap+20
Incentives55
Confidence65
investOne report1 publisher

Washington puts Korea's public-sector cloud program on its list of trade demands

A Seoul Economic Daily column lists four Korean digital rules the U.S. has asked Seoul to change, among them the CSAP cloud certification and the requirements for moving personal and location data overseas.

Publishers:en.sedaily.com

Reality

Evidence25
Adoption
Not scored
Hype gap+20
Incentives60
Confidence35