Diplomatic academy e‑learning platform breached for 9 months, exposing ministry staff data
Unidentified hackers infiltrated South Korea’s diplomatic academy e‑learning system from April 2025 to February 2026, stealing IDs, names, emails and encrypted passwords of current and former foreign‑service trainees. The attack exploited a zero‑day server flaw and mis‑configurations, underscoring the vulnerability of government training platforms and prompting calls for tighter cyber defenses.