NIS Launches Emergency Security Checks at More Than 2,100 Central and Local Government Institutions

Following a Series of Cyberattacks on Financial Institutions
Public-Sector Data Leaks Also on the Rise
Vulnerability Checks to Be Completed by Mid-Month

The National Intelligence Service (NIS) has asked more than 2,100 institutions, including central government ministries and local governments, to conduct their own security checks following a series of cyberattacks on financial institutions. It plans to directly check for vulnerabilities in the information systems of key public-sector information and communications infrastructure facilities and complete the checks by mid-November.

According to the NIS on November 3, each institution will use a checklist to review the security of external access points, whether its security monitoring system is operational, and whether security patches have been applied. They have been instructed to focus on the management of points that could be exposed to cyberattacks. Separately, the NIS is directly checking for vulnerabilities at internet access points in information systems at key public-sector information and communications infrastructure facilities.

After a personal information leak was identified at Shinhan Bank in late September, security breaches were also confirmed at KB Kookmin Bank, Hana Bank, BNK Busan Bank, savings banks, and capital finance companies. In response, the Financial Services Commission held an emergency inspection meeting on October 4 and ordered a comprehensive review of IT assets exposed to external networks.

Since May, the NIS has conducted joint inspections of the public sector with the Ministry of the Interior and Safety and other agencies to prepare for cyber threats arising from the emergence of advanced artificial intelligence (AI) technologies. The inspections identified vulnerabilities in key control systems, public-facing web services, and security equipment, and corrective measures were taken. In-depth inspections were also carried out on critical systems closely tied to people’s daily lives.

Hacking and personal information leak incidents have occurred repeatedly in the public sector this year. In early February, the Ministry of Foreign Affairs was notified of suspicious access to the National Diplomatic Academy’s online education system and blocked access to the system. The attacker is believed to have taken control of the server in April and May 2025 and continued accessing it through February 2026. On August 17, an attack exploiting a vulnerability in the Government24 children’s portal resulted in the leakage of memory dump files from 11 servers, among other data.

This content was produced with the assistance of AI translation services.