Skip to content

Company

Personal Information Protection Commission

South Korea's independent data protection authority, enforcing privacy law and issuing fines for data breaches and misuse.

Known aliases

  • PIPC
  • PPC

Current stories

securityOne report1 publisher

One 2021 malware breach accounts for 1,130 of Seoul National University's 1,132 leaked records

Seoul National University told a lawmaker that 1,130 of the 1,132 records leaked in 28 hacking incidents since 2021 came from a single 2021 attack. Departmental systems were hit most often, so attack frequency and data loss need separate explanations.

Reality

Evidence55
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence55
investOne report1 publisher

Korean firms buy cyber insurance only up to the privacy law's minimum

Only 153 of the 2,486 new cyber policies Samsung, DB, Hyundai, KB and Meritz wrote in the first half, or 6.2%, covered breach response and recovery. More than nine in ten were the liability cover Korea's privacy law requires, so companies pay for breach investigation and data recovery themselves.

Publishers:en.sedaily.com

Reality

Evidence55
Adoption12
Hype gap+10
Incentives60
Confidence55
investConfirmed3 publishers

Coupang sues Korea's privacy regulator to cancel its record 624.7 billion won fine

Coupang has filed two suits in the Seoul Administrative Court to cancel the Personal Information Protection Commission's record 624.7 billion won in fines. The court's answer is likely to become the reference price for a data breach at a large Korean platform.

Perspective Coverage

4 publishers
Builder
Builder 19%
Operator
Operator 37%
Investor
Investor 44%

Reality

Evidence70
Adoption
Not scored
Hype gap+8
Incentives55
Confidence68
investConfirmed2 publishers

Kia union's 5,000-member data leak traces to a training vendor serving about 20 organizations

Malgnsoft, an online training vendor, lost data on about 5,000 Kia union members in a hack that reached about 20 of its client organizations. One of those clients is the defense ministry, so a car-plant union's risk depended on who else kept records with the same vendor.

Reality

Evidence60
Adoption
Not scored
Hype gap+15
Incentives40
Confidence60
securityConfirmed6 publishers

Attackers used hijacked Nikkei accounts to send 9,000 phishing emails to staff and sources

Nikkei said attackers used hijacked staff Microsoft 365 accounts to send about 9,000 malicious-link emails on September 30, many to outside sources. The company believes recipients' names and addresses were exposed and expects more mail impersonating its staff.

Perspective Coverage

6 publishers
Builder
Builder 19%
Operator
Operator 60%
Investor
Investor 21%

Reality

Evidence70
Adoption
Not scored
Hype gap+10
Incentives30
Confidence65
securityConfirmed2 publishers

Suspected ransomware takes down about 500 servers at Osaka Metropolitan University

Osaka Metropolitan University cancelled classes after a suspected ransomware attack stopped about 500 servers, Japanese media reported. Records on at least 130,000 current and former students, faculty and others may be exposed, though the university has not confirmed any theft.

Reality

Evidence60
Adoption
Not scored
Hype gap+15
Incentives
Not scored
Confidence62
investOne report1 publisher

Regulators head for Sejong, and the access bill lands on the firms they supervise

The FSC relocation plan reaches Cabinet this week. The agency trades address for institutional survival, while supervised firms in the capital region absorb the access cost on an unpublished timeline.

Publishers:en.sedaily.com

Reality

Evidence34
Adoption16
Hype gap+14
Incentives74
Confidence38