NCRC Notifies Domestic and Overseas Adoption Data Breach: "Exact Cause Under Investigation"

"Exposure of Adoption-Related Personal Information Confirmed"

Notification Sent via Email to Some Domestic and Overseas Adoptees

Sensitive Data Leaked, Including Adoption Country, Adoptive Mother, and Resident Registration Number

On May 4, it was confirmed that sensitive personal information, including adoption records, was leaked from the National Child Rights Commission (NCRC), a public institution under the Ministry of Health and Welfare.

The NCRC is responsible for storing records related to domestic and overseas adoptions at the national level and serves as a gateway to ensure information access rights for overseas adoptees.

The National Child Rights Commission (NCRC) informed some overseas adoptees via email that a personal information leakage incident had occurred related to the Adoption Information Request website in accordance with the Personal Information Protection Act. Photo by the reporter

The NCRC recently notified some overseas adoptees via email, stating, "We inform you that a personal information leakage incident has occurred concerning the Adoption Information Disclosure Request website," and added, "We sincerely apologize for any concern and inconvenience this incident may have caused."

The Adoption Information Disclosure Request website is an online platform that stores records related to the birth and adoption process of domestic and overseas adoptees, allowing adoptees, birth parents, and adoptive parents to apply for and confirm necessary information.

On April 30, a new system was introduced on the website to reduce inconvenience for prospective adoptive parents, enabling the entire process from submitting adoption documents to checking the application status online.

Main screen of the Adoption Information Disclosure Request website.

According to the NCRC, the suspected timeframe of the personal information leakage is estimated to be from April 30 to May 2.

The leaked personal information includes: name, date of birth, gender, email address, adoption agency, adoption country, adoptive parents' names, phone number, passport number, resident registration number, adoption certificate issuance number and purpose, address and address change history, resident registration-related information, physical information (height, weight), and birthplace, among others.

The NCRC explained that the specific information leaked may vary by individual, and details on which information was exposed will be provided individually through the website.

The NCRC stated, "It was confirmed that adoption-related personal information was exposed through the 'My Page' section during the operation of the Adoption Information Disclosure Request website," adding, "The exact cause of the incident is currently under investigation."

The commission further announced, "We will strengthen system security and implement additional protection measures to prevent recurrence, and provide support in accordance with relevant laws if any damage occurs."

Overseas adoptees were advised to be cautious of suspicious contacts (such as phone calls, text messages, emails) and to refrain from responding to requests for personal information.

A Ministry of Health and Welfare official stated, "Dozens of adoptees, both domestic and overseas, have been affected by the personal information leakage," and added, "We have reported the incident to the Personal Information Protection Commission and notified the confirmed affected individuals."

Meanwhile, a notice was posted on the Adoption Information Disclosure Request website announcing that emergency system inspection and improvement measures have been completed, and the website has been operating normally since 10:00 p.m. on May 2.

This content was produced with the assistance of AI translation services.