The Yoido Full Gospel Church in Seoul reported a potential data breach affecting 850,000 members. The exposed information includes names, birth dates, and records of changes to personal details, such as 2,629 resident registration numbers, 3,964 phone numbers, and 7,202 addresses.
Cybersecurity firm Oasis Security discovered the data on an overseas server in September. The server also contained information from the Sarang Church, including 89,000 member records and 286 employee files. Attack logs suggest the theft occurred in August, involving the use of AI sub-agents and machine-written reports.
Following a notification from the Korea Internet and Security Agency, the Yoido Full Gospel Church restricted external server access and updated passwords. The church is now planning to replace its firewall and engage security firms to identify further vulnerabilities.
Recent incidents in South Korea also include a breach at Shinhan Bank, where data for 25,000 customers was exposed. President Lee Jae Myung confirmed that AI tools are suspected to have been utilized in these recent cyberattacks against commercial banks.
