In brief
A security‑related online platform inadvertently made available a file with names, passport numbers, and other personal details of 168 people attached to President Lee Jae‑Myung’s June trip to Belgium, Italy and France. Police and the presidential office have begun investigations and are reviewing security protocols, while the incident raises questions about data protection and public accountability.
South Korean police launched a preliminary investigation on Tuesday after a file containing the personal information of 168 people, including President Lee Jae‑Myung, his wife and a handful of cabinet ministers, was exposed online on a security‑related platform that scans for malware. The leak involved names, affiliations, job titles, dates of birth, passport numbers, and passport issuance and expiration dates of those aboard the presidential aircraft during a June trip to Belgium, Italy and France.
The file, titled “Passenger list (South Korea‑Belgium),” was uploaded to a paid security‑related website on June 2, ahead of the president’s overseas tour. The platform, which allows users to scan files or web addresses for malicious code, reportedly made the file available for download for about five months before it was removed. Police suspect the upload occurred while the file was being scanned for malicious content.
In an emergency meeting, presidential chief of staff Lim Kwang‑hyun described the leak as a “serious incident that cannot be overlooked” and called for a thorough investigation into the breach and any damages that may have resulted. He also urged relevant government agencies to review the security management system for presidential overseas tours and to devise effective countermeasures, according to statements from Cheong Wa Dae.
Cheong Wa Dae said it has taken responsive measures upon becoming aware of the online leak and that the foreign ministry and other relevant agencies would conduct further actions. The presidential office also opened an internal review to determine the exact extent of the data breach and to identify who was responsible.
According to the Yonhap reports, the leaked data included individuals not only from the president’s close circle—such as first lady Kim Hea‑Kyung, presidential policy chief Kim Yong‑beom and national security adviser Wi Sung‑lac—but also key government officials, staff members of the presidential blue house, and media personnel covering the trip. The groups affected are part of the official apparatus that supports the president’s diplomatic missions, and their personal data was made publicly accessible on a commercial platform.
Experts note that the leak underscores the vulnerability of personal data entrusted to state security systems, particularly when files are processed through third‑party services. The incident highlights the need for stricter controls over how sensitive information is stored, transmitted and scanned for threats.
From a civic perspective, this breach touches on public accountability in several ways. First, presidential officials are bound by strict confidentiality and security protocols; any laxity can compromise national security and the safety of public servants. Second, the leak potentially exposes individuals to identity theft or targeted threats, raising concerns about the state's duty to protect its own personnel. Third, the incident demonstrates that personal data governance in South Korea remains in flux, raising questions about how legislation and enforcement mechanisms keep pace with evolving digital threats.
The police investigation is still in its early stages. Authorities are examining the file’s origin, the platform’s security measures, and whether the breach extended beyond the 168 individuals listed. Police also plan to assess any potential harm caused by the exposure of sensitive details such as passport numbers and birth dates.
Meanwhile, internal presidential office documents suggest that the party and the government will review the procedures used for compiling passenger lists for state aircraft. The goal is to prevent a recurrence and to ensure that personal data associated with diplomatic missions is handled exclusively within secure, government‑controlled environments.
Although no suspect has yet been named, the Korean police are expected to trace the file’s upload path to the security platform and determine whether the incident involved a malicious insider or a technical oversight. The outcome will likely inform policy revisions on data handling for officials involved in international travel.
In the broader context of South Korean cybersecurity, this incident joins recent high‑profile data leaks involving government databases. The country’s data protection laws have been under scrutiny, and lawmakers argue that they need to be tightened to safeguard civil‑service personnel and public data alike.
As investigations continue, the leak will remain a focal point for discussions about data privacy, national security, and the responsibilities of government bodies to shield their officials from exposure to malicious actors. The outcome of the police probe and the subsequent policy reviews will likely shape South Korea’s approach to handling sensitive personal information in the future.
