South Korea·Government·Announced by the organization or a regulator
Korea Student Aid Foundation data breach (Jun 2023)
What happened
The Korea Student Aid Foundation suffered a credential stuffing attack using pre‑collected account information from overseas IP addresses, resulting in unauthorized access to many members' personal data. Over millions of login attempts were made, and a significant number succeeded, exposing names, email addresses, addresses, phone numbers, customer numbers, student loan details, and scholarship information, and the agency fined the foundation for insufficient security measures, including storing resident registration numbers in plain text.
This page summarizes and translates our record written in Korean. Counts and dates come from that record unchanged. Read the original record →
Facts on record
- Country
- South Korea
- Industry
- Government
- Announced
- Jun 27, 2023
- Affected
- 32,000 people
- Data exposed
- Addresses, email addresses, phone numbers, names
- Status
- Announced by the organization or a regulator
- Compensation and penalties
- A fine or other penalty on record